CVE-2019-25245
Ross Video DashBoard 8.5.1 Privilege Escalation via Insecure Permissions
- State
- Published
- Severity
- 8.5 High
- Published
- Dec 24, 2025
- Updated
- Mar 5, 2026
- Reserved
- Dec 24, 2025
Description
Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a malicious executable.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-732 Incorrect Permission Assignment for Critical Resource
Affected Products
| Product | Versions |
|---|---|
DashBoardRoss Video Ltd. |
|
References
- ExploitDB-46742exploit
- Ross Video Official Product Homepageproduct
- Zero Science Lab Disclosure (ZSL-2019-5516)third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.