Approved changes feed: RSS · Atom

cpe:2.3:a:megatec_taiwan:clientmate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMegatec Taiwan (368f7a4a-9aa9-5680-96fd-7e76d5960b1e)
ProductClientmate (b7f69403-9f60-56bc-8799-28de3d316497)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-66265 vulnerable 2026-06-08 07:41:18.463752 Insecure permissions in configuration directory (C:\\usr)
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.
Published: 2025-11-26T01:12:50.505Z
Updated: 2025-11-26T15:31:02.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66264 vulnerable 2026-06-08 07:41:18.463209 Unquoted Service path in UPSilon2000V6.0 SYSTEM privilege service
The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.
Published: 2025-11-26T01:09:51.506Z
Updated: 2025-11-26T16:09:51.264Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.