CVE-2025-66269 — Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM

CVE-2025-66269

Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM PUBLISHED

Description (CNA)

The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in

Affected (CNA)

Vendor / product	Versions
MegaTec Taiwan / UPSilon2000V6.0	affected 6.0.5

CWE

CWE-428

References

https://www.megatec.com.tw/software-download/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.