Beveiligingsadvies

CVE-2025-66265

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-26 01:12:50
Laatst bijgewerkt 2025-11-26 15:31:02
Toegewezen door Gridware
CVSS-score 6.9
Status PUBLISHED

Beschrijving

CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.