CVE-2025-0542: G DATA Management Server Local privilege escalation
Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0542?
CVE-2025-0542 is classified as a local privilege escalation vulnerability.
How does CVE-2025-0542 exploit the G DATA Management Server?
CVE-2025-0542 exploits the G DATA Management Server by allowing an attacker to place a crafted ZIP archive in the update mechanism.
Who is affected by CVE-2025-0542?
Any installation of G DATA Management Server that is improperly configured is vulnerable to CVE-2025-0542.
How do I fix CVE-2025-0542?
To fix CVE-2025-0542, ensure that the update mechanism of G DATA Management Server correctly assigns privileges to temporary files.
What potential impact does CVE-2025-0542 have?
CVE-2025-0542 can lead to unauthorized privilege escalation, allowing attackers to gain higher-level access to affected systems.