MegaTec Taiwan UPSilon2000V6.0 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting MegaTec Taiwan UPSilon2000V6.0: 2 record(s), with affected versions and fixes.
CVE-2025-66269
High · 7.1
CWE-428 Nov 25, 2025
Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in
CVE-2025-66266
Critical · 9.3
CWE-269 Nov 25, 2025
Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation
The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the service to immediately achieve code execution and privilege escalation