CVE-2025-24864

Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege.

Score

CVSS 3.0 7.8 High

Status

Deferred - vultures@jpcert.or.jp

Published

2025-03-06

Last modified

2025-03-06

Weaknesses

CWE-276

Affected products

• Remoteview Agent For Windows (Rsupport Co.ltd.)

References

• https://help.rview.com/hc/ja/articles/38287019277843-%E7%B7%8A%E6%80%A5%E3%83%91%E3%83%83%E3%83%81%E4%BD%9C%E6%A5%AD%E3…
• https://jvn.jp/en/jp/JVN24992507/