7.8Alta
CVE-2025-57846
Descripción
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
Debilidad (CWE):
CWE-276
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Digital Arts Inc. | i-フィルター 6.0 | prior to 6.00.55 | |
| Digital Arts Inc. | i-FILTER ブラウザー＆クラウド MultiAgent for Windows | prior to 4.93.R11 | |
| Digital Arts Inc. | i-フィルター for マルチデバイス | prior to 6.00.55 (Windows version only) | |
| Digital Arts Inc. | i-フィルター for ZAQ | prior to 6.00.55 (Windows version only) | |
| Fujitsu Limited | FENCE-Mobile RemoteManager i-FILTER Browser Service | prior to 4.93R11 | |
| OPTiM Corporation | Optimal Biz Web Filtering Powered by i-FILTER (Windows version) | prior to 4.93R11 |