A privilege escalation vulnerability in multiple Digital Arts Inc. i-フィルター products allows local attackers to gain SYSTEM privileges through improper file permissions.

This vulnerability is caused by incorrect default permissions (CWE-276), which allows a local authenticated attacker to replace a service executable with a malicious file. Upon system restart or service execution, the product will execute the malicious file with SYSTEM privileges.

The ability for a local authenticated attacker to escalate privileges to SYSTEM level represents a severe security risk. This could lead to a total compromise of the affected host, including the installation of persistent backdoors, exfiltration of sensitive data, and the disabling of security controls. With a CVSS score of 7.8, this vulnerability is considered High severity, particularly in environments where local users may have restricted access but should not have the ability to modify system services.

Immediate Action: Update all affected i-フィルター installations to the fixed versions (e.g., 6.00.55 or 4.93.R11 depending on the specific product) as specified in the vendor advisory.

Proactive Monitoring: Review system logs for unauthorized modifications to service binary paths or unexpected service restarts that may indicate an attempt to replace legitimate executables.

Compensating Controls: Restrict local user permissions to prevent non-administrative users from modifying files within the application installation directories.

Public Exploit Available: No (exploit_available: false)

Given the potential for full system compromise, administrators should prioritize the deployment of the provided patches for all identified i-フィルター components. Organizations should verify that their patching process covers all listed products, including those under the FENCE-Mobile and ZAQ branding, to ensure no vulnerable service remains on the network.