CVE-2025-66461 | BDVDB-2026-304445 Detail
GS Yuasa InternationalFULLBACK Manager Pro (for Windows)
Description#
FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-428 Unquoted search path or element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.