CVE-2025-0542 - CVE House
Back to Database
Status published High CVE-2025-0542

G DATA Management Server Local privilege escalation

Vulnerability Description

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0542

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Fabian Duschek

References

More from G DATA CyberDefense AG

View All →
CVE-2025-0543
G DATA Security Client Local privilege escalation
High 8.5

Affected Vendor

G DATA CyberDefense AG

View all reports →

Affected Software

G DATA Management Server
Vulnerable Versions:
0

Timeline

Official Publish: January 25th, 2025
Last Modified: February 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-276 CWE-22

MITRE ATT&CK TTPs

T1222 File and Directory Permissions Modification
Defense Evasion
T1078 Valid Accounts
Persistence
T1574 Hijack Execution Flow
Privilege Escalation
T1021 Remote Services
Lateral Movement
T1005 Data from Local System
Collection
T1190 Exploit Public-Facing Application
Initial Access
T1552 Unsecured Credentials
Credential Access
T1565.001 Stored Data Manipulation
Impact