CVE-2025-58400

HighCVSS 8.4/10Last modified Jun 17, 2026

Description

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

Metrics

CVSS 4.0 8.4/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-428

Affected software

Vendor	Product	Versions
RATOC Systems, Inc.	RATOC RAID Monitoring Manager for Windows	prior to Ver.2.00.09.250820

References

Timeline

Published: Sep 5, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-584015.1Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauth CVE-2025-584027.5The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the pa CVE-2025-584035.1CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A remote unauthenti CVE-2025-584056.1The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-bas CVE-2025-584064.3The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MI CVE-2025-584077.4Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trig CVE-2025-584085.9Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to ke CVE-2025-584093.5Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical m CVE-2025-58416.4The ACF Onyx Poll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all versions up to, and inc CVE-2025-584107.5Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers export CVE-2025-584118.8Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference coun CVE-2025-584126.1A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 thr