CVE-2025-66269
Last modified
CVE-2025-66269 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-66269?
How severe is CVE-2025-66269?
How do I fix CVE-2025-66269?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-66261Unauthenticated OS Command Injection (restore_settings.php) …9.8
- CVE-2025-66262Arbitrary File Overwrite via Tar Extraction Path Traversal i…9.8
- CVE-2025-66263Unauthenticated Arbitrary File Read via Null Byte Injection …7.5
- CVE-2025-66264The CMService.exe service runs with SYSTEM privileges and co…7.2
- CVE-2025-66265CMService.exe creates the C:\\usr directory and subdirectori…6.9
- CVE-2025-66266The RupsMon.exe service executable in UPSilon 2000 has insec…9.3
- CVE-2025-6627A vulnerability has been found in TOTOLINK A702R 4.0.0-B2023…8.8
- CVE-2025-66270The KDE Connect protocol 8 before 2025-11-28 does not correl…4.7
- CVE-2025-66271Clone for Windows provided by ELECOM CO.,LTD. registers a Wi…8.4
- CVE-2025-66273A command injection vulnerability has been reported to affec…7.2
- CVE-2025-66274A NULL pointer dereference vulnerability has been reported t…4.9
- CVE-2025-66276QuTS hero is not affected. We have already fixed the vulner…9.8
Are you affected by CVE-2025-66269?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST