CVE-2025-9043CWE-428

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as…

Medium · published August 14, 2025

CVSS v4.0
6.7
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious Program.exe file, which would execute with SYSTEM privileges.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00145 · 3.4th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2025-08-14T16:27Z
EPSS history
Timeline
  • 14 AUG 16:27Z
    The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as…
    cvelistv5