CVE-2025-46811 is a critical Missing Authorization vulnerability in SUSE Linux Manager, specifically affecting various SUSE Manager server images and containers. This flaw allows any unauthenticated attacker with network access to port 443 of a vulnerable SUSE Manager instance to execute arbitrary commands as root on any connected client. With a CVSS score of 9.8 (Critical), this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, indicating awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| SUSE | Container Suse/Manager/5.0/X86 64/Server:5.0.5.7.30.1 | >= ?, < 5.0.27-150600.3.33.1CNA affecteddefault unaffected | |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS | >= ?, < 4.3.87-150400.3.110.2CNA affecteddefault unaffected | |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure | >= ?, < 4.3.87-150400.3.110.2CNA affecteddefault unaffected | |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 | >= ?, < 4.3.87-150400.3.110.2CNA affecteddefault unaffected | |
| SUSE | Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE | >= ?, < 4.3.87-150400.3.110.2CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.