PT-2025-35173 · Naver · Naver Mybox Explorer For Windows

Minwoo Jeong · Published 2025-08-29 · Updated 2025-09-03 · CVE-2025-58323

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NAVER MYBOX Explorer for Windows versions prior to 3.0.8.133

Description NAVER MYBOX Explorer for Windows is susceptible to a local privilege escalation issue. A local attacker can elevate privileges to NT AUTHORITYSYSTEM by executing arbitrary files due to insufficient privilege checks.

Recommendations Update NAVER MYBOX Explorer for Windows to version 3.0.8.133 or later.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-58323

Affected Products

Naver Mybox Explorer For Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-58323 · Security Note
• https://cve.naver.com/detail/cve-2025-58323.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-58323 · Vendor Advisory
• https://twitter.com/cracbot/status/1963195324198953373 · Twitter Post
• https://twitter.com/CVEnew/status/1961282393798742246 · Twitter Post
• https://t.me/cveNotify/133964 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1961297967916220518 · Twitter Post