MegaTec Taiwan vulnerabilities
We track 3 vulnerabilities in MegaTec Taiwan products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 26, 2025.
Latest MegaTec Taiwan vulnerabilities
- 7.1 High severity
UPSilon2000V6.0: Unquoted Search Path or Element
The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that
- 9.3 Critical severity
UPSilon2000V6.0: Improper Privilege Management
The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path
- 7.2 High severity
ClientMate: Unquoted Search Path or Element
The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.