What is CVE-2019-25608?

CVE-2019-25608 is a high-severity vulnerability in Iperius Backup, classified under CWE-520. CVSS score: 8.4/10. Published 2026-03-22.

How severe is CVE-2019-25608?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Iperius Backup

CVE-2019-25608

Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs. Attackers can configure backup jobs to execute malicious batch files or programs before or after backup operations, which run with the privileges of the Iperius Backup Service account (Local System or Administrator), enabling privilege escalation and arbitrary code execution.

EPSS: 0.001 (3.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Iperius Backup — versions 6.1.0

Weakness classification (CWE)

CWE-520

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2019-25608?: CVE-2019-25608 is a high-severity vulnerability in Iperius Backup, classified under CWE-520. CVSS score: 8.4/10. Published 2026-03-22.
How severe is CVE-2019-25608?: High severity. CVSS v3 base score is 8.4 out of 10.