Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-9043

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Seagate

Description

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious Program.exe file, which would execute with SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Seagate Toolkit

Default version status: unaffected

  • 0 to < 2.34.0.33affected

References