VULNERABILITY INTELLIGENCE
CVE-2019-25271
CVSS score8.5 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2026-02-05
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.
Weakness classification
- CWE-428: Unquoted Search Path or Element