Skip to content
OpenAdvisories
High · 7.8 CVE-2025-0542 EUVD-2025-1750GHSA-4482-3c55-4652

G DATA Management Server Local privilege escalation

Published Jan 25, 2025 · Updated Feb 12, 2025 · Assigned by cirosec

Description

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write.

Affected products

VendorProductAffectedFixed
G DATA CyberDefense G DATA Management Server < 15.8.333 15.8.333

References