CVE-2025-66461CWE-428

CVE-2025-66461

Medium · published December 8, 2025

CVSS v3.0

6.7

EPSS

Percentile

4.3

In the wild

Unconfirmed

What it is

FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed.

The record

Technical detail

CVSS v3.0: 6.7 · MEDIUM
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00155 · 4.3th percentile
Weakness: CWE-428 · Unquoted Search Path or Element
Published: 2025-12-08T15:16Z

References (2)

https://jvn.jp/en/jp/JVN59242986/ · [email protected]https://ps.gs-yuasa.com/technicalinfo/pdf/failure/FMP_info20251201_TEX48214-993.pdf · [email protected]

EPSS history

Timeline

08 DEC 09:31Z
FULLBACK Manager Pro provided by GS Yuasa International Ltd
cvelistv5