Vulnerabilities

TI-2025-40749 CVE-2025-66269 · GHSA-2jxx-qpjm-mvc4

Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM

LOW 30

The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths.

CVSS 4.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00126 Published 2025-11-26 No fix listed CWE-428

TI-2025-40748 CVE-2025-66266 · GHSA-9553-998g-436x

MEDIUM 41

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control.

CVSS 4.0CRITICAL 9.3 Local No auth No interaction EPSS 0.00146 Published 2025-11-26 No fix listed CWE-269

TI-2025-40747 CVE-2025-66265 · GHSA-9cqc-hhcp-cf94

LOW 29

CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00122 Published 2025-11-26 No fix listed CWE-269

TI-2025-40746 CVE-2025-66264 · GHSA-hhgj-xcf6-9r3p

LOW 31

The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path.

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00126 Published 2025-11-26 No fix listed CWE-428