PT-2025-17450 · Filewave · Filewave Windows Client

Published 2025-04-21 · Updated 2025-04-26 · CVE-2025-43922

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FileWave Windows client versions prior to 16.0.0

Description The issue allows an unprivileged local user to escalate privileges to SYSTEM in certain non-default configurations.

Recommendations For versions prior to 16.0.0, update to version 16.0.0 or later to resolve the issue.

Fix

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-43922

Affected Products

Filewave Windows Client

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-43922 · Security Note
• https://twitter.com/cybercronai/status/1914778902985126096 · Twitter Post
• https://twitter.com/threatsbank/status/1914590972870078649 · Twitter Post
• https://twitter.com/cracbot/status/1915722508407316897 · Twitter Post
• https://twitter.com/cracbot/status/1916084908499312962 · Twitter Post
• https://twitter.com/CVEnew/status/1914352897716048190 · Twitter Post
• https://t.me/cvedetector/23452 · Telegram Post
• https://t.me/cvetracker/22062 · Telegram Post
• https://t.me/latest_high_impact_cve/2180 · Telegram Post
• https://kb.filewave.com/books/downloads/page/filewave-version-1603 · Note