NetSight
medium6.7

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as…

Impact

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious Program.exe file, which would execute with SYSTEM privileges.

Affected products

VendorProductAffected versions
SeagateSeagate Toolkit On
before 2.34.0.33

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References