CVE-2025-0543 — G DATA Security Client Local privilege escalation

CVE-2025-0543

G DATA Security Client Local privilege escalation PUBLISHED

Description (CNA)

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in execution by the SetupSVC.exe service in the context of SYSTEM.

Affected (CNA)

Vendor / product	Versions
G DATA CyberDefense AG / G DATA Security Client	affected 0 before 15.8.333

CWE

CWE-276

References

https://github.com/nullby73/security-advisories/tree/main/CVE-2025-0543

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.