Windows Services Vulnerability in Multiple Roboticsware Products
CVE-2025-64151
8.4HIGH
What is CVE-2025-64151?
Multiple Roboticsware products are vulnerable due to the improper registration of Windows services with unquoted file paths. This flaw allows an attacker with write permissions on the system drive's root directory to execute arbitrary code with SYSTEM privileges. As a result, critical system operations could be compromised, potentially leading to unauthorized access and control over the affected systems. It is essential for users of affected products to promptly address this vulnerability to protect their systems.
Affected Version(s)
BA-Panel6 Rev17 and earlier
FA-Panel6 Rev17 and earlier
FA-Server6 Rev17 and earlier
References
CVSS V4
Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
CVSS V3.0
Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved