CVE-2025-0543
High
Description
Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in execution by the SetupSVC.exe service in the context of SYSTEM.
SeverityHigh
CVSS7.8
Exploit probability—
ProductG DATA Security Client
PublishedJan 25, 2025
First seenJan 25, 2025
Weakness typeCWE-276CWE-276
How to fix
Update
- G DATA CyberDefense AG G DATA Security Client15.8.333 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| G DATA CyberDefense AG G DATA Security Client | v < 15.8.333 | 15.8.333 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.