Home

Description

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under CWE-428: Unquoted Search Path or Element. An attacker with write permissions to the root could place a malicious Program.exe file, which would execute with SYSTEM privileges.

PUBLISHED Reserved 2025-08-14 | Published 2025-08-14 | Updated 2025-08-21 | Assigner Seagate




MEDIUM: 6.7CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-428 Unquoted Search Path or Element

Product status

Default status
unaffected

Any version before 2.34.0.33
affected

References

www.seagate.com/support/software/toolkit/

www.seagate.com/product-security/

cve.org (CVE-2025-9043)

nvd.nist.gov (CVE-2025-9043)

Download JSON