CVE Intelligence

Vulnerabilidades do MegaTec Taiwan ClientMate

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam MegaTec Taiwan ClientMate: 2 registro(s), com versões afetadas e correções.

CVE-2025-66265 Média · 6.9 CWE-269 25/11/2025
Insecure permissions in configuration directory (C:\\usr)
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.
CVE-2025-66264 Alta · 7.2 CWE-428 25/11/2025
Unquoted Service path in UPSilon2000V6.0 SYSTEM privilege service
The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.