Vulnerability in Ross Video Ltd. Dashboard
CVE-2019-25245
Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files due to improper permission settings. Attackers can exploit the 'M' or 'C' flags for 'Authenticated Users' group to replace the DashBoard.exe binary with a malicious executable.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (13.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 13th percentile — 13.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Ross Video Ltd. Dashboard — versions 8.5.1
Weakness classification (CWE)
References
- www.exploit-db.com/exploits/46742 (exploit)
- www.rossvideo.com (product)
- www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5516.php (third-party-advisory)
Frequently asked questions
- What is CVE-2019-25245?
- CVE-2019-25245 is a high-severity vulnerability in Ross Video Ltd. Dashboard, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.8/10. Published 2025-12-24.
- How severe is CVE-2019-25245?
- High severity. CVSS v3 base score is 8.8 out of 10.