Windows Services Vulnerability in Multiple Roboticsware Products
CVE-2025-64151

8.4HIGH

Key Information:

Vendor

Roboticsware Pte. Ltd.

Status
Fa-panel6
Ba-panel6
Pa-panel6
Fa-server6
Vendor
CVE Published:
5 November 2025

What is CVE-2025-64151?

Multiple Roboticsware products are vulnerable due to the improper registration of Windows services with unquoted file paths. This flaw allows an attacker with write permissions on the system drive's root directory to execute arbitrary code with SYSTEM privileges. As a result, critical system operations could be compromised, potentially leading to unauthorized access and control over the affected systems. It is essential for users of affected products to promptly address this vulnerability to protect their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BA-Panel6 Rev17 and earlier

FA-Panel6 Rev17 and earlier

FA-Server6 Rev17 and earlier

References

https://www.roboticsware.com/dev-jp/2025/10/28/announceme...
https://jvn.jp/en/jp/JVN92563420/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.