What is CVE-2019-25245?

CVE-2019-25245 is a high-severity vulnerability in Ross Video Ltd. Dashboard, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.8/10. Published 2025-12-24.

How severe is CVE-2019-25245?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Ross Video Ltd. Dashboard

CVE-2019-25245

Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a malicious executable.

EPSS: 0.002 (10.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ross Video Ltd. Dashboard — versions 8.5.1

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2019-25245?: CVE-2019-25245 is a high-severity vulnerability in Ross Video Ltd. Dashboard, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.8/10. Published 2025-12-24.
How severe is CVE-2019-25245?: High severity. CVSS v3 base score is 8.8 out of 10.