CVE-2025-66461highCWE-428

CVE-2025-66461: high-severity vulnerability in GS Yuasa International Ltd.

Published

Follow this CVE+ Monitor FULLBACK Manager Pro+ Monitor FULLBACK Manager Pro for Network

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 0.2%
FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
GS Yuasa International Ltd. · FULLBACK Manager Pro for Network (for Windows)GS Yuasa International Ltd. · FULLBACK Manager Pro (for Windows)