Security Advisory
CVE-2025-66265
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
CMService.exe creates the C:usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.