{"id":85830,"date":"2025-11-13T12:20:31","date_gmt":"2025-11-13T12:20:31","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-10941-critical-vulnerability-in-topaz-servcore-teller-leading-to-permission-issues","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-10941-critical-vulnerability-in-topaz-servcore-teller-leading-to-permission-issues\/","title":{"rendered":"CVE-2025-10941: Critical Vulnerability in Topaz SERVCore Teller leading to Permission Issues<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report details a critical vulnerability, CVE-2025-10941, in the Topaz SERVCore Teller application, which impacts versions 2.14.0-RC2\/2.14.1. The vulnerability lies in the SERVCoreTeller_2.0.40D.msi component and can be exploited to gain unauthorized access to the system, leading to potential data leakage or system compromise. Given the severity of the vulnerability, it’s crucial for users and administrators to understand its implications and take immediate steps to mitigate the risk.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-10941
\nSeverity: High (7.8 CVSS Score)
\nAttack Vector: Local
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Unauthorized access, potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Topaz SERVCore Teller | 2.14.0-RC2\/2.14.1<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability exists in the file SERVCoreTeller_2.0.40D.msi of the installer component. It allows a local user to execute manipulations that lead to permission issues. The root cause of the vulnerability is the now deprecated “nssm” service, which was used by earlier versions of the application’s installer.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

In this conceptual example, a local user might exploit the vulnerability by executing a malicious command that manipulates the SERVCoreTeller_2.0.40D.msi file. Below is a hypothetical example:<\/p>\n

C:\\> nssm set SERVCoreTeller_2.0.40D.msi AppDirectory \"C:\\malicious_directory\"\nC:\\> nssm start SERVCoreTeller_2.0.40D.msi<\/code><\/pre>\n
This shell command sets the application directory of the SERVCoreTeller_2.0.40D.msi service to a malicious directory and starts the service, effectively granting the attacker unauthorized access to the system.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
The vendor has already patched this vulnerability by removing the use of “nssm” in the latest version of the installer. Therefore, users are strongly advised to upgrade to the latest version of Topaz SERVCore Teller. As a temporary mitigation, users can also implement a web application firewall (WAF) or an intrusion detection system (IDS) to detect and prevent potential exploitation of this vulnerability.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview This report details a critical vulnerability, CVE-2025-10941, in the Topaz SERVCore Teller application, which impacts versions 2.14.0-RC2\/2.14.1. The vulnerability lies in the SERVCoreTeller_2.0.40D.msi component and can be exploited to gain unauthorized access to the system, leading to potential data leakage or system compromise. Given the severity of the vulnerability, it’s crucial for users and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-85830","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t