7.8
High
CVE-2025-57846 Multiple i-フィルター products contain an issue with incorrect default permissions
Description
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| i-フィルター 6.0 | Versions not published | |
| i-フィルター for マルチデバイス | Versions not published | |
| i-フィルター for ZAQ | Versions not published | |
| i-フィルター for ネットカフェ | Versions not published | |
| i-FILTER ブラウザー＆クラウド MultiAgent for Windows | Versions not published | |
| FENCE-Mobile RemoteManager i-FILTER Browser Service | Versions not published | |
| Optimal Biz Web Filtering Powered by i-FILTER (Windows version) | Versions not published |