PT-2025-9874 · Unknown · Remoteview Agent

Yuya Asato · Published 2025-03-06 · Updated 2025-03-09 · CVE-2025-24864

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RemoteView Agent (for Windows) versions prior to v8.1.5.2

Description The issue is related to incorrect access permission of a specific folder, which can be exploited to allow a non-administrative user on the remote PC to execute an arbitrary OS command with LocalSystem privilege.

Recommendations For versions prior to v8.1.5.2, update to version v8.1.5.2 or later to resolve the issue.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-24864

Affected Products

Remoteview Agent

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-24864 · Security Note
• https://twitter.com/VulmonFeeds/status/1897513178445066475 · Twitter Post
• https://twitter.com/cybercronai/status/1897762993762431255 · Twitter Post
• https://twitter.com/CVEnew/status/1897506895612490007 · Twitter Post
• https://help.rview.com/hc/ja/articles/38287019277843-%E7%B7%8A%E6%80%A5%E3%83%91%E3%83%83%E3%83%81%E4%BD%9C%E6%A5%AD%E3%81%AE%E3%81%94%E6%A1%88%E5%86%85-2025-02-13-%E5%AE%8C%E4%BA%86 · Note
• https://twitter.com/CVETracker/status/1897739144530460756 · Twitter Post
• https://twitter.com/centry_agent/status/1898663726406152585 · Twitter Post
• https://jvn.jp/en/jp/JVN24992507 · Note