Security Advisory
CVE-2025-66265
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.