CVE-2025-57699: High severity Western Digital Kitfox vulnerability
Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with the SYSTEM privilege.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57699?
CVE-2025-57699 is rated as a high severity vulnerability due to the potential for arbitrary code execution with SYSTEM privileges.
How do I fix CVE-2025-57699?
To fix CVE-2025-57699, ensure that the file path for the Windows service is correctly quoted or update to a patched version of Western Digital Kitfox.
Who is affected by CVE-2025-57699?
Users of Western Digital Kitfox software on Windows, particularly those with write permissions on the system drive, are affected by CVE-2025-57699.
Can CVE-2025-57699 be exploited remotely?
CVE-2025-57699 requires local access to the system, so it cannot be exploited remotely.
What are the system requirements to be vulnerable to CVE-2025-57699?
Any Windows system with the Western Digital Kitfox software installed is susceptible to CVE-2025-57699 if the conditions of unquoted service paths are met.