Vulnerability Description
RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN98737186/
- https://www.ratocsystems.com/dlsoft/dlsoft_storage/dlsoft_hddcase/raidmanager/
- https://www.ratocsystems.com/topics/userinfo/raidmanager202508/
FAQ
What is CVE-2025-58400?
CVE-2025-58400 is a vulnerability with a CVSS score of 6.7 (MEDIUM). RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system d...
How severe is CVE-2025-58400?
CVE-2025-58400 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-58400?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.