Low severity · published Nov 25, 2025
CVE-2025-59485
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4
3.3
CVSS
0.1%
EPSS
No
On KEV
Description
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Security Point (Windows) of MaLion · Intercom, Inc.
prior to Ver.5.3.4 · source: vendor
Affected product
SP
Security Point (Windows) of MaLion
Intercom, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-59485
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-59485
jvn.jp
https://jvn.jp/en/jp/JVN76298784/
www.intercom.co.jp
https://www.intercom.co.jp/information/2025/1125.html
More from Security Point (Windows) of MaLion
9.8
CVE-2025-64693
Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length
9.8
CVE-2025-62691
Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers