7.8Hoch
CVE-2025-57846
Beschreibung
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
Schwachstellentyp (CWE):
CWE-276
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Digital Arts Inc. | i-フィルター 6.0 | prior to 6.00.55 | |
| Digital Arts Inc. | i-FILTER ブラウザー＆クラウド MultiAgent for Windows | prior to 4.93.R11 | |
| Digital Arts Inc. | i-フィルター for マルチデバイス | prior to 6.00.55 (Windows version only) | |
| Digital Arts Inc. | i-フィルター for ZAQ | prior to 6.00.55 (Windows version only) | |
| Fujitsu Limited | FENCE-Mobile RemoteManager i-FILTER Browser Service | prior to 4.93R11 | |
| OPTiM Corporation | Optimal Biz Web Filtering Powered by i-FILTER (Windows version) | prior to 4.93R11 |