← voltar
CVE-2025-57846

CVE-2025-57846

CVSS 8.5 HIGHEPSS 0.1%CWE-276
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Digital Arts Inc. · i-FILTER ブラウザー＆クラウド MultiAgent for WindowsDigital Arts Inc. · i-フィルター 6.0Digital Arts Inc. · i-フィルター for ZAQDigital Arts Inc. · i-フィルター for ネットカフェDigital Arts Inc. · i-フィルター for マルチデバイスFujitsu Limited · FENCE-Mobile RemoteManager i-FILTER Browser ServiceOPTiM Corporation · Optimal Biz Web Filtering Powered by i-FILTER (Windows version)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://jvn.jp/en/jp/JVN55678602/https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20250827_01.pdfhttps://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20250827_02.pdf