Upsilon2000V6.0
Approved changes feed: RSS · Atom
cpe:2.3:a:megatec_taiwan:upsilon2000v6.0:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Megatec Taiwan (368f7a4a-9aa9-5680-96fd-7e76d5960b1e) |
|---|---|
| Product | Upsilon2000V6.0 (b96ed000-46d1-501d-8d35-7a025e33c840) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66269 |
vulnerable | 2026-06-08 07:41:18.465964 |
Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in
Published: 2025-11-26T01:19:18.496Z
Updated: 2025-11-26T14:30:14.483Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66266 |
vulnerable | 2026-06-08 07:41:18.465620 |
Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation
The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the service to immediately achieve code execution and privilege escalation
Published: 2025-11-26T01:16:40.731Z
Updated: 2025-11-26T15:28:25.062Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.