PT-2025-21632 · Cbewin · Cbewin Anytxt Searcher

Ba1_Ma0 · Published 2025-05-16 · Updated 2025-05-17 · CVE-2025-4769

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: CBEWIN Anytxt Searcher version 1.3.1128.0

Description: A critical vulnerability was found in CBEWIN Anytxt Searcher, affecting the file ATService.exe. This issue leads to an uncontrolled search path. The attack requires local access and has a high complexity, making exploitation difficult. The vulnerability is classified as critical.

Recommendations: For version 1.3.1128.0, as a temporary workaround, consider restricting access to the ATService.exe file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Uncontrolled Search Path Element

Weakness Enumeration

CWE-426

CWE-427

Related Identifiers

CVE-2025-4769

Affected Products

Cbewin Anytxt Searcher

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-4769 · Security Note
• https://yuque.com/ba1ma0-an29k/nnxoap/ds2f8b1hdc4ng9zg?singleDoc · Note
• https://twitter.com/CVEnew/status/1923600405235130604 · Twitter Post
• https://vuldb.com/?submit.571820 · Note
• https://t.me/latest_high_impact_cve/2383 · Telegram Post
• https://vuldb.com/?id.309070 · Note
• https://t.me/cvetracker/24016 · Telegram Post
• https://vuldb.com/?ctiid.309070 · Note