Security Advisory

CVE-2025-43596

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-22 16:49:06
Last updated 2025-05-22 19:33:20
Assigner cisa-cg
State PUBLISHED

Description

An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 (released on 2025-05-15).