CVE-2025-0542 — G DATA Management Server Local privilege escalation

CVE-2025-0542

G DATA Management Server Local privilege escalation PUBLISHED

Description (CNA)

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write.

Affected (CNA)

Vendor / product	Versions
G DATA CyberDefense AG / G DATA Management Server	affected 0 before 15.8.333

CWE

CWE-276, CWE-22

References

https://github.com/nullby73/security-advisories/tree/main/CVE-2025-0542

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.