CVE-2025-61865

Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

CVE-2025-61865

creationtimestamp| type| source ---|---|--- 2025-10-23 07:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3tu7o4jso2f 2025-10-25 08:17:34+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yxa5pgxs2g...

Multiple I-O DATA NAS management applications register Windows services with unquoted file paths

Overview Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. Multiple NAS management applications provided by I-O DATA DEVICE, INC. contain the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-61865...