PT-2025-39360 · Unknown · Topaz Servcore Teller

Published 2025-09-25 · Updated 2025-09-25 · CVE-2025-10941

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Topaz SERVCore Teller versions 2.14.0-RC2 through 2.14.1

Description A local permission bypass issue exists in Topaz SERVCore Teller. The issue affects some unknown functionality within the SERVCoreTeller 2.0.40D.msi file of the Installer component. Successful exploitation can lead to permission issues. The vendor was contacted regarding this issue but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

CWE-275

Related Identifiers

CVE-2025-10941

Affected Products

Topaz Servcore Teller

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-10941 · Security Note
• https://t.me/CVEtracker/33310 · Telegram Post
• https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt · Note
• https://twitter.com/VulmonFeeds/status/1971176827008802851 · Twitter Post
• https://twitter.com/CveFindCom/status/1971177716171850218 · Twitter Post
• https://twitter.com/CVEnew/status/1971175021771944145 · Twitter Post
• https://vuldb.com/?ctiid.325811 · Note
• https://t.me/cveNotify/136373 · Telegram Post
• https://vuldb.com/?id.325811 · Note
• https://vuldb.com/?submit.651434 · Note