Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-66266 EUVD-2025-199688GHSA-9553-998g-436x

Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation

Published Nov 26, 2025 · Updated Nov 26, 2025 · Assigned by Gridware

Description

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the service to immediately achieve code execution and privilege escalation

Affected products

VendorProductAffectedFixed
MegaTec Taiwan UPSilon2000V6.0 6.0.5 —

References