CVE-2025-66269 — Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and esc…
Published: 2025-11-26 · CVSS: 7.1 · CVSS 4.0
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7