CVE-2025-66461
6.7
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| GS Yuasa International Ltd. | FULLBACK Manager Pro (for Windows) | 4.00 and earlier | affected |
| GS Yuasa International Ltd. | FULLBACK Manager Pro for Network (for Windows) | 3.00 and earlier | affected |
Weaknesses
- CWE-428: Unquoted search path or element
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://ps.gs-yuasa.com/technicalinfo/pdf/failure/FMP_info20251201_TEX48214-993.pdf
- https://jvn.jp/en/jp/JVN59242986/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.