CVE-2025-0542 | BDVDB-2026-264256 Detail
G DATA CyberDefenseG DATA Management Server
Description#
Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.