CVE-2019-25245

Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a malicious executable.

CVSS v4.0

8.5 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.23% chance of exploitation in the next 30 days, 14th percentile

Published

2025-12-24

Updated

2026-03-05

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/46742

References

• CVE Record
• NVD entry

Related

• CVE-2019-25244
• CVE-2019-25246
• CVE-2019-25243
• CVE-2019-25247
• CVE-2019-25242
• CVE-2019-25248