CVE-2025-6241

0 CVSS

Vulnerability Description

LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present in the SYSTEM PATH environment variable, the user can write a malicious DLL to that directory with arbitrary code. This malicious DLL is executed in the context of NT AUTHORITY\SYSTEM upon service start or restart, due to the Windows default dynamic-link library search order, resulting in local elevation of privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-6241

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://documentation.lakesidesoftware.com/en/Content/Release%20Notes/Agent/10_10_0%20Hotfix%20Agent%20Release%20Notes%20On%20Premises.htm?tocpath=Release%20Notes%7CAgent%7C_____13

More from Lakeside Software

View All →

CVE-2023-6080

Privilege Escalation to SYSTEM in Lakeside Software Installer

Unknown 0

Affected Vendor

Lakeside Software

View all reports →

Affected Software

SysTrack

Vulnerable Versions:

10.05.0027

Timeline

Official Publish: July 27th, 2025

Last Modified: November 3rd, 2025

Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.