CVE-2025-9043 - The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element

Back Back to CVE browser

MEDIUM

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element

Published Aug 14, 2025

6.7

MEDIUM

CVSS 4.0

EPSS 0.14%

Description

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious Program.exe file, which would execute with SYSTEM privileges.

Affected products

Vendor Seagate Product Toolkit Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2.34.0.33

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Seagate

Toolkit

unaffected

Version	Status	Constraints
0	affected	<2.34.0.33

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (2)

Link	Providers	Tags
https://www.seagate.com/product-security/#security-advisories
https://www.seagate.com/support/software/toolkit/

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Seagate

Published Aug 14, 2025

Updated Aug 21, 2025

Reserved Aug 14, 2025

Link CVE-2025-9043

CISA Vulnrichment

Updated Aug 14, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-9043

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-9043