7.8Yüksek
CVE-2025-57846
Açıklama
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
Zayıflık türü (CWE):
CWE-276
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Digital Arts Inc. | i-フィルター 6.0 | prior to 6.00.55 | |
| Digital Arts Inc. | i-FILTER ブラウザー＆クラウド MultiAgent for Windows | prior to 4.93.R11 | |
| Digital Arts Inc. | i-フィルター for マルチデバイス | prior to 6.00.55 (Windows version only) | |
| Digital Arts Inc. | i-フィルター for ZAQ | prior to 6.00.55 (Windows version only) | |
| Fujitsu Limited | FENCE-Mobile RemoteManager i-FILTER Browser Service | prior to 4.93R11 | |
| OPTiM Corporation | Optimal Biz Web Filtering Powered by i-FILTER (Windows version) | prior to 4.93R11 |