Security Advisory

CVE-2025-66271

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-09 08:29:48
Last updated 2025-12-09 14:30:57
Assigner jpcert
State PUBLISHED

Description

Clone for Windows provided by ELECOM CO.,LTD. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.