CVE-2025-66266
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the service to immediately achieve code execution and privilege escalation.
Risk Assessment
A local attacker could gain SYSTEM privileges, leading to full system compromise.
Recommendation
Restrict permissions on RupsMon.exe and service configuration so only administrators have full control, and update the software if a patch is available.
Other vulnerabilities in UPSilon 2000
Original NVD description (English source)
The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the service to immediately achieve code execution and privilege escalation
Vulnerability data from NVD (NIST) · CISA KEV · EPSS