PT-2025-48122 · Unknown · Upsilon 2000+1

Abdul Mhanni · Published 2025-11-26 · Updated 2025-11-26 · CVE-2025-66266

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions UPSilon 2000 version 6.0.5 UPSilon 2000 (affected versions not specified)

Description The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, granting the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or modify the service configuration to achieve code execution and privilege escalation. The affected service is the RupsMon.exe service.

Recommendations Restrict access to the RupsMon.exe service executable to prevent unauthorized modifications. Audit permissions on the RupsMon.exe service executable and remove Full Control access for the 'Everyone' group.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-66266

Affected Products

Rupsmon.Exe

Upsilon 2000

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-66266 · Security Note
• https://t.me/CVEtracker/38263 · Telegram Post
• https://megatec.com.tw/software-download · Note
• https://twitter.com/transilienceai/status/1993523110448894322 · Twitter Post
• https://twitter.com/offseq/status/1993508054277525868 · Twitter Post
• https://twitter.com/0dayPublishing/status/1993502481242833265 · Twitter Post
• https://twitter.com/CVEnew/status/1993513515173151040 · Twitter Post