Q: What is CVE-2025-66265 — CVE-2025-66265?

CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.

Question 1

What is CVE-2025-66265 — CVE-2025-66265?

Accepted Answer

CMService.exe creates the C:\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.

Question 2

What is the authoritative source for CVE-2025-66265?

Accepted Answer

CVE-2025-66265 (CVE-2025-66265) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2025-66265CVE-2025-66265

Description

Scoring