PT-2026-5804 · Netgate · Netgate Data Backup

CVE-2019-25271 · Publicado 2026-02-04 · Atualizado 2026-02-05

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGATE Data Backup version 3.0.620

Description The software contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. This allows attackers to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

Recommendations Apply appropriate quoting to the service path configuration for the NGDatBckpSrv Windows service.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-25271

Produtos afetados

Netgate Data Backup

Referências · 6

• 🔥 https://exploit-db.com/exploits/47746 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25271 · Nota de Segurança
• http://netgate.sk · Nota
• https://t.me/cveNotify/150932 · Publicação no Telegram
• https://t.me/CVEtracker/43774 · Publicação no Telegram
• https://vulncheck.com/advisories/netgate-data-backup-ngdatbckpsrv-unquoted-service-path · Nota