UPSilon2000V6.0 vulnerabilities

2 known vulnerabilities in UPSilon2000V6.0 from MegaTec Taiwan. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  UPSilon2000V6.0: Unquoted Search Path or Element

  CVE-2025-66269Nov 26, 2025MegaTec Taiwan

  The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that

• 9.3 Critical severity

  UPSilon2000V6.0: Improper Privilege Management

  CVE-2025-66266Nov 26, 2025MegaTec Taiwan

  The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path