HIGH
Ross Video DashBoard 8.5.1 Privilege Escalation via Insecure Permissions
Published Dec 24, 2025
8.5
HIGHCVSS 4.0
EPSS 0.24%
Description
Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a malicious executable.
Affected products
-
- Version 8.5.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Ross Video Ltd. | DashBoard | unaffected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205311 Advisory
- https://www.exploit-db.com/exploits/46742 exploit
- https://www.rossvideo.com product
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5516.php exploitthird-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205311 | Advisory | |
| https://www.exploit-db.com/exploits/46742 | exploit | |
| https://www.rossvideo.com | product | |
| https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5516.php | exploitthird-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Dec 24, 2025
Updated Mar 5, 2026
Reserved Dec 24, 2025
Link CVE-2019-25245
CISA Vulnrichment
Updated Dec 24, 2025
ENISA EUVD
EUVD-2025-205311 Assigner VulnCheck
Published Dec 24, 2025
Updated Mar 5, 2026
Exploited since n/a
Link EUVD-2025-205311