CVE-2025-66269 | BDVDB-2026-303237 Detail
MegaTec TaiwanUPSilon2000V6.0
Description#
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-428 Unquoted Search Path or Element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.