CNNVD-202507-2996 Information

CNNVD ID

CNNVD-202507-2996

CVE-2025-8070

  • CNNVD Published: 2025-07-23

Description (Chinese)

ASUSTOR Backup Plan(ABP)是中国台北华芸科技(ASUSTOR)公司的一个Windows备份工具。 ASUSTOR Backup Plan 2.0.7.6130及之前版本和AES 1.0.6.6133及之前版本存在安全漏洞,该漏洞源于未加引号的ImagePath注册表值,可能导致权限提升。

Description (English)

SUSTOR Backup Plan (ABP) is a Windows backup tool for Chinese company ASUSTOR. There is a security loophole in the SUSTOR Backup Plan 2.0.7.6130 et seq. and AES 1.0.6.6133 et seq., which originates from the ImagePath registration value, which is not quoted, and may lead to an increase in privileges.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

华芸科技

Published

2025-07-23

Last Modified

2026-02-24

References

https://www.asustor.com/security/security_advisory_detail?id=47

Patch

https://www.asustor.com/service/download_abp

Share on: