KB34503790: Revised Security Update for Microsoft Configuration Manager

On September 8, 2025, Microsoft released KB34503790, a revised security update for Microsoft Configuration Manager (ConfigMgr / SCCM). This hotfix is important for administrators running versions 2403, 2409, or 2503, as it addresses a serious vulnerability (CVE-2025-47178) and strengthens how discovery data records (DDR) are processed.

What Does KB34503790 Fix?

• Resolves CVE-2025-47178: A security vulnerability affecting discovery data records.
• Enhances DDR processing: Ensures safer handling of system and user discovery information.
• Supersedes earlier updates:
  • KB28204160 for version 2403
  • KB30385346 for version 2409
  • KB32480179 for version 2503

This revised hotfix improves overall system security and reliability, making it critical for enterprise deployments.

Who Needs This Update?

This update applies to organizations running:

• SCCM / ConfigMgr 2403
• SCCM / ConfigMgr 2409
• SCCM / ConfigMgr 2503

If your environment uses one of these versions, applying KB34503790 is strongly recommended.

Installation Guide

1. Open the Configuration Manager console
   Navigate to Administration → Updates and Servicing.
2. Locate KB34503790
   Select the update matching your version (2403, 2409, or 2503).
3. Run prerequisite checks
   Always run the checks to avoid deployment issues in production.
4. Install the hotfix
   Accept license terms and complete the wizard.
5. Perform a site reset
   A restart is not required, but a site reset is necessary.
   • 1 = up to date
   • 0 = not all fixes applied
6. Verify SMS Provider version
   Ensure smsprov.dll has been updated to the expected build.

Update secondary sites
Use Recover Secondary Site in the console. Verify status with:

select dbo.fnGetSecondarySiteCMUpdateStatus('SiteCode_of_secondary_site')

Why This Update Matters

• Improved Security: Closes a vulnerability that could expose your ConfigMgr infrastructure.
• Compliance: Keeps your IT environment aligned with Microsoft’s latest security standards.
• Operational Stability: Reduces risks in discovery and site synchronization.

Final Thoughts

KB34503790 is more than just a hotfix — it’s a critical security update that every Configuration Manager admin should apply. By patching CVE-2025-47178 and improving DDR processing, it safeguards your infrastructure against potential threats.