Riskcovery

CVE-2025-57846

State
Published
Severity
8.5 High
Published
Aug 27, 2025
Updated
Aug 27, 2025
Reserved
Aug 21, 2025

Read the record on cve.org

Description

Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.

Scores

CVSSScoreVectorSource
4.08.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Njpcert
3.07.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hjpcert

Weaknesses

  • CWE-276 Incorrect default permissions

Affected Products

ProductVersions
i-フィルター 6.0Digital Arts Inc.
  • prior to 6.00.55Affected
i-フィルター for マルチデバイスDigital Arts Inc.
  • prior to 6.00.55 (Windows version only)Affected
i-フィルター for ZAQDigital Arts Inc.
  • prior to 6.00.55 (Windows version only)Affected
i-フィルター for ネットカフェDigital Arts Inc.
  • prior to 6.10.55Affected
i-FILTER ブラウザー＆クラウド MultiAgent for WindowsDigital Arts Inc.
  • prior to 4.93.R11Affected
FENCE-Mobile RemoteManager i-FILTER Browser ServiceFujitsu Limited
  • prior to 4.93R11Affected
Optimal Biz Web Filtering Powered by i-FILTER (Windows version)OPTiM Corporation
  • prior to 4.93R11Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.