PT-2025-48123 · Unknown+2 · Upsilon 2000+2

Abdul Mhanni · Published 2025-11-26 · Updated 2025-11-26 · CVE-2025-66269

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions UPSilon 2000 (affected versions not specified)

Description The RupsMon and USBMate services operate with SYSTEM privileges and are configured with unquoted service paths. This configuration allows a local attacker to potentially intercept paths and elevate privileges if they possess write access to the directories preceding the legitimate service executable locations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2025-66269

Affected Products

Rupsmon

Upsilon 2000

Usbmate

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66269 · Security Note
• https://megatec.com.tw/software-download · Note
• https://twitter.com/CVEnew/status/1993513514208473517 · Twitter Post
• https://t.me/CVEtracker/38264 · Telegram Post