medium6.9
CVE-2025-66265
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users.
Impact
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.