PT-2026-21781 · Genetech · Genetec Update Service

Rutger Flohil · Publicado 2026-02-24 · Atualizado 2026-02-25 · CVE-2025-1787

Positive Technologies (AI Summary)

CVSS v4.0

5.8

Média

Vetor base

AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:C/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Genetec Update Service (affected versions not specified)

Description A local administrator may be able to obtain information from the Genetec Update Service configuration web page. An authenticated Windows user with administrator privileges could exploit this to gain elevated privileges within the Genetec Update Service. This issue could potentially be combined with another issue to achieve low privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Enumeração de Fraquezas

CWE-346

Identificadores relacionados

CVE-2025-1787

Produtos afetados

Genetec Update Service

Referências · 4

• https://techdocs.genetec.com/r/en-US/Security-Updates-for-GenetecTM-Update-Service-2.10/Resolved-vulnerabilities-in-Genetec-Update-Service-2.10 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-1787 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-1787 · Nota de Segurança
• https://twitter.com/CVEnew/status/2026676433305874543 · Publicação no Twitter