VULNERABILITY INTELLIGENCE

CVE-2025-57392

CVSS score7.8 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-09-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILE_ALL_ACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon launch by another user or elevated context.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-732

Primary references