CVE-2019-25271

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

Vulnerability Details

Published Date

February 05, 2026

Last Modified

February 06, 2026

CWE ID

CWE-428

Source

NVD

Vendor

NETGATE

Product

Data Backup

External References

http://www.netgate.sk/
https://www.exploit-db.com/exploits/47746
https://www.vulncheck.com/advisories/netgate-data-backup-ngdatbckpsrv-unquoted-service-path

CVE-2019-25271

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment