CVE-2025-0542: G Data Cyberdefense AG G Data Management Server

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write.

Affected products

• G Data Cyberdefense AG G Data Management Server: before 15.8.333 (fixed in 15.8.333)

Published 2025-01-25. Last modified 2026-06-17.