Approved changes feed: RSS · Atom

cpe:2.3:a:i-o_data_device,_inc.:narsus_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorI O Data Device, Inc. (778e22e9-0a62-59c4-949b-59149240692d)
ProductNarsus App (c8c51de1-467a-5255-a5a1-458c382140f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-61865 vulnerable 2026-06-03 15:07:57.366913 Details available
MEDIUM (6.7)
Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
Published: 2025-10-23T04:14:50.057Z
Updated: 2025-12-10T06:36:23.383Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.