CVE-2019-25272CWE-428

TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path

High · published February 4, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

⚡ An overlooked service path is an open door for local attackers! The CCSrvProxy service in TexasSoft CyberPlanet 6.4.131 has an unquoted service path vulnerability that could unleash chaos. 🔥 Think of this vulnerability like a restaurant where the chef cooks with ingredients labeled wrong—anyone with access can whip up a dish that wasn't intended, potentially ruining the meal for everyone. In this case, a local attacker can slip in malicious code through the unsecured path of 'C:\Program Files (x86)\TenaxSoft\CyberPlanet\SrvProxy.exe'. An attacker could exploit this flaw to execute arbitrary code, effectively taking control of the system and gaining elevated privileges. This could lead to total system compromise, allowing unauthorized actions such as modifying sensitive files, installing malware, or even deleting critical system data. It's a serious risk that absolutely demands your attention!

Put simply

Think of this vulnerability like a restaurant where the chef cooks with ingredients labeled wrong—anyone with access can whip up a dish that wasn't intended, potentially ruining the meal for everyone. In this case, a local attacker can slip in malicious code through the unsecured path of 'C:\Program Files (x86)\TenaxSoft\CyberPlanet\SrvProxy.exe'. This vulnerability arises from the CCSrvProxy service not enclosing its service path in quotes, allowing attackers to substitute the intended executable with a malicious one, leading to remote code execution.

What to do

An attacker could exploit this flaw to execute arbitrary code, effectively taking control of the system and gaining elevated privileges. This could lead to total system compromise, allowing unauthorized actions such as modifying sensitive files, installing malware, or even deleting critical system data. It's a serious risk that absolutely demands your attention! To secure your system, immediately check for the vulnerable version 6.4.131 and patch to the latest version. Ensure the service path is properly quoted to prevent unauthorized access. Additionally, conduct an audit of local permissions to minimize possible access points. You've got this! By taking these steps, you're one step closer to securing your system like a pro. 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-04T23:15Z
EPSS history
Timeline
  • 04 FEB 23:15Z
    TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path
    cvelistv5