Vulnerabilidades do MegaTec Taiwan UPSilon2000V6.0
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam MegaTec Taiwan UPSilon2000V6.0: 2 registro(s), com versões afetadas e correções.
CVE-2025-66269
Alta · 7.1
CWE-428 25/11/2025
Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in
CVE-2025-66266
Crítica · 9.3
CWE-269 25/11/2025
Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation
The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the service to immediately achieve code execution and privilege escalation