What is CVE-2025-59485?

CVE-2025-59485 is a low-severity vulnerability in Intercom, Inc. Security Point (Windows) Of Malion, classified under Incorrect Default Permissions. CVSS score: 3.3/10. Published 2025-11-25.

How severe is CVE-2025-59485?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Intercom, Inc. Security Point (Windows) Of Malion

CVE-2025-59485

Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.

EPSS: 0.001 (1.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Intercom, Inc. Security Point (Windows) Of Malion — versions prior to Ver.5.3.4

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

Frequently asked questions

What is CVE-2025-59485?: CVE-2025-59485 is a low-severity vulnerability in Intercom, Inc. Security Point (Windows) Of Malion, classified under Incorrect Default Permissions. CVSS score: 3.3/10. Published 2025-11-25.
How severe is CVE-2025-59485?: Low severity. CVSS v3 base score is 3.3 out of 10.