Description
An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 (released on 2025-05-15).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MSP360 | Backup | 8.0 | 8.1.1.19 |
Advisories 1
- VA-25-119-01 MSP360 Backup insecure filesystem permissions CISA ICS & IT advisories · May 19, 2025