CVE-2019-25285

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the service restarts or the system reboots.

Score

CVSS 4.0 8.5 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-02-05

Last modified

2026-07-28

Weaknesses

CWE-428

Affected products

• Controller (Aviatrix)

References

• https://www.alps.com/e/
• https://www.exploit-db.com/exploits/47637
• https://www.vulncheck.com/advisories/alps-pointing-device-controller-aphidmonitorservice-unquoted-service-path