{"id":"CVE-2025-4769","state":"PUBLISHED","title":"CBEWIN Anytxt Searcher ATService.exe uncontrolled search path","description":"A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult.","publishedAt":"2025-05-16T10:39:01.349Z","updatedAt":"2025-05-16T15:00:29.382Z","severity":{"score":7.3,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["CBEWIN Anytxt Searcher"],"affected":[{"vendor":"CBEWIN","product":"Anytxt Searcher","versions":[{"version":"1.3.1128.0","status":"affected"}]}],"references":["https://vuldb.com/?id.309070","https://vuldb.com/?ctiid.309070","https://vuldb.com/?submit.571820","https://www.yuque.com/ba1ma0-an29k/nnxoap/ds2f8b1hdc4ng9zg?singleDoc"],"weaknesses":["CWE-427","CWE-426"],"ingestedAt":"2026-10-29T20:09:23.771Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/4xxx/CVE-2025-4769.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-4769","state":"PUBLISHED","datePublished":"2025-05-16T10:39:01.349Z","dateUpdated":"2025-05-16T15:00:29.382Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-05-15T12:43:44.198Z"},"containers":{"cna":{"title":"CBEWIN Anytxt Searcher ATService.exe uncontrolled search path","descriptions":[{"lang":"en","value":"A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult."},{"lang":"de","value":"In CBEWIN Anytxt Searcher 1.3.1128.0 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Es geht um eine nicht näher bekannte Funktion der Datei ATService.exe. Durch die Manipulation mit unbekannten Daten kann eine uncontrolled search path-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs hat dabei lokal zu erfolgen. Die Komplexität eines Angriffs ist eher hoch. Das Ausnutzen gilt als schwierig."}],"affected":[{"vendor":"CBEWIN","product":"Anytxt Searcher","versions":[{"version":"1.3.1128.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.309070","name":"VDB-309070 | CBEWIN Anytxt Searcher ATService.exe uncontrolled search path","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.309070","name":"VDB-309070 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.571820","name":"Submit #571820 | Anytxt Searcher ATService 1.3.1128.0 privilege escalation","tags":["third-party-advisory"]},{"url":"https://www.yuque.com/ba1ma0-an29k/nnxoap/ds2f8b1hdc4ng9zg?singleDoc","tags":["broken-link"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":7.3,"vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":7,"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7,"vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":6,"vectorString":"AV:L/AC:H/Au:S/C:C/I:C/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","type":"CWE","lang":"en","description":"Uncontrolled Search Path"}]},{"descriptions":[{"cweId":"CWE-426","type":"CWE","lang":"en","description":"Untrusted Search Path"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-05-16T10:39:01.349Z"},"timeline":[{"time":"2025-05-15T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-05-15T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-05-16T12:43:35.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Ba1_Ma0 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-16T14:58:15.941178Z","id":"CVE-2025-4769","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-16T15:00:29.382Z"}}]}}}