Local Privilege Escalation in i-フィルター Products by DAJ
CVE-2025-57846
8.5HIGH
What is CVE-2025-57846?
Multiple i-フィルター products by DAJ feature incorrect default permissions, which could be exploited by a local authenticated attacker. By taking advantage of this vulnerability, the attacker might replace a service executable on the system where the product operates, which can potentially lead to arbitrary code execution with elevated SYSTEM privileges. This poses significant risks to system integrity and security, as unauthorized actions could be performed without detection.
Affected Version(s)
FENCE-Mobile RemoteManager i-FILTER Browser Service prior to 4.93R11
i-FILTER ブラウザー＆クラウド MultiAgent for Windows prior to 4.93.R11
i-フィルター 6.0 prior to 6.00.55
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
CVSS V3.0
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved