CVE-2025-66265

Publication date

2025-11-26 01:12:50

Family

Gridware

State

PUBLISHED

Description

CMService.exe creates the C:usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.