« Volver al listado

CVE-2025-64699

Estado: AnalizadaAlta (7.8)—

An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw disk operations, which could lead to system disruption (DoS) and exposure of sensitive data, and may facilitate local privilege escalation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso local (AV:L) sin interacción con permisos limitados (PR:L) que permite escalada de privilegios explotando DACL incorrecto. Impacto: permisos débiles en objeto del dispositivo, denegación de servicio por operaciones raw disk no autorizadas, y acceso a datos sensibles.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramRestrict File and Directory PermissionsPrivileged Account ManagementFilter Network TrafficExecution PreventionApplication Isolation and Sandboxing

Tecnologías afectadas (2)

Sevencs — Ec2007 KernelSevencs — Orca G2

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-64699",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-64699",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-02T15:59:17.516607Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-12-31T16:15:48.110",
  "references": [
    {
      "url": "https://gist.github.com/GunP4ng/42b19ee99e94c315173b74a9fb26c2b9",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw disk operations, which could lead to system disruption (DoS) and exposure of sensitive data, and may facilitate local privilege escalation."
    },
    {
      "lang": "es",
      "value": "Existe un problema de DACL NULA incorrecta en SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). El proceso regService, que se ejecuta con privilegios de SYSTEM, aplica un Descriptor de Seguridad a un objeto de dispositivo sin una DACL configurada explícitamente. Esta condición podría permitir a un atacante realizar operaciones de disco sin procesar no autorizadas, lo que podría provocar la interrupción del sistema (DoS) y la exposición de datos sensibles, y podría facilitar la escalada de privilegios local."
    }
  ],
  "lastModified": "2026-09-28T22:10:00.160",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sevencs:ec2007_kernel:5.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B7535E9-C8EB-41F7-A6A8-4698A33E4239"
            },
            {
              "criteria": "cpe:2.3:a:sevencs:orca_g2:2.0.1.35:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29199970-680B-493F-BB24-F18DE15C1468"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}