CVE-2025-4769
CBEWIN Anytxt Searcher ATService.exe uncontrolled search path
- State
- Published
- Severity
- 7.3 High
- Published
- May 16, 2025
- Updated
- May 16, 2025
- Reserved
- May 15, 2025
Description
A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.3 High | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 7.0 High | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 3.0 | 7.0 High | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 2.0 | 6.0 Medium | AV:L/AC:H/Au:S/C:C/I:C/A:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Anytxt SearcherCBEWIN |
|
References
- VDB-309070 | CBEWIN Anytxt Searcher ATService.exe uncontrolled search pathvdb-entry
- VDB-309070 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #571820 | Anytxt Searcher ATService 1.3.1128.0 privilege escalationthird-party-advisory
- https://www.yuque.com/ba1ma0-an29k/nnxoap/ds2f8b1hdc4ng9zg?singleDocbroken-link
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.