PT-2025-9873 · Unknown · Remoteview Agent

Yuya Asato · Published 2025-03-06 · Updated 2025-03-09 · CVE-2025-22447

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RemoteView Agent (for Windows) versions prior to 8.1.5.2

Description A service issue exists due to incorrect access permissions, allowing a non-administrative user on the remote PC to potentially execute an arbitrary OS command with LocalSystem privilege if the issue is exploited.

Recommendations For versions prior to 8.1.5.2, update to version 8.1.5.2 or later to resolve the issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-22447

Affected Products

Remoteview Agent

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-22447 · Security Note
• https://twitter.com/CVEnew/status/1897506894551384568 · Twitter Post
• https://twitter.com/centry_agent/status/1897539372888809610 · Twitter Post
• https://twitter.com/cybercronai/status/1897747988899844206 · Twitter Post
• https://help.rview.com/hc/ja/articles/38287019277843-%E7%B7%8A%E6%80%A5%E3%83%91%E3%83%83%E3%83%81%E4%BD%9C%E6%A5%AD%E3%81%AE%E3%81%94%E6%A1%88%E5%86%85-2025-02-13-%E5%AE%8C%E4%BA%86 · Note
• https://twitter.com/centry_agent/status/1898663726406152585 · Twitter Post
• https://jvn.jp/en/jp/JVN24992507 · Note