CVE Intelligence

MegaTec Taiwan ClientMate vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting MegaTec Taiwan ClientMate: 2 record(s), with affected versions and fixes.

CVE-2025-66265 Medium · 6.9 CWE-269 Nov 25, 2025
Insecure permissions in configuration directory (C:\\usr)
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.
CVE-2025-66264 High · 7.2 CWE-428 Nov 25, 2025
Unquoted Service path in UPSilon2000V6.0 SYSTEM privilege service
The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.