PT-2025-38109 · Omron Social Solutions Co. · Ups Management Application

Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-9818

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OMRON SOCIAL SOLUTIONS Co., Ltd. UPS management application (affected versions not specified)

Description The Uninterruptible Power Supply (UPS) management application is susceptible to a flaw where executable file paths for Windows services are not properly enclosed in quotation marks. This can lead to the potential execution of unauthorized files with service privileges if the installation folder path contains spaces. This issue is related to CWE-428.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2025-9818

Affected Products

Ups Management Application

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-9818 · Security Note
• https://twitter.com/CVEnew/status/1968190744952193035 · Twitter Post
• https://omron.com/jp/ja/inquiry/vulnerability_information/OMSR-2025-005_ja.pdf · Note
• https://omron.com/global/en/inquiry/vulnerability_information/OMSR-2025-005_en.pdf · Note
• https://twitter.com/VulmonFeeds/status/1968252431487152551 · Twitter Post
• https://t.me/CVEtracker/32719 · Telegram Post