Vulnerability · Published May 16, 2025 · Assigned by VulDB
CVE-2025-4769CBEWIN Anytxt Searcher ATService.exe uncontrolled search path
High 7.0
In plain English
A high-severity uncontrolled search path in Anytxt Searcher from CBEWIN. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.2%top 90.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| CBEWIN | Anytxt Searcher | 1.3.1128.0 |
Weakness: CWE-427, CWE-426 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- VDB-309070 | CBEWIN Anytxt Searcher ATService.exe uncontrolled search path vdb-entry
- VDB-309070 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #571820 | Anytxt Searcher ATService 1.3.1128.0 privilege escalation third-party-advisory
- https://www.yuque.com/ba1ma0-an29k/nnxoap/ds2f8b1hdc4ng9zg?singleDoc broken-link