CVE-2025-50329

Published Jul 22, 2026 CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Description
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Privilege Escalation via PowerArc.exe in ConeXware Power Archiver
Type Values Removed Values Added
Title Privilege Escalation via PowerArc.exe in ConeXware Power Archiver
Type Values Removed Values Added
Title Privilege Escalation and Arbitrary Code Execution via powerarc.exe in ConeXware Power Archiver
Weaknesses CWE-285
Type Values Removed Values Added
Weaknesses CWE-693
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Privilege Escalation and Arbitrary Code Execution via powerarc.exe in ConeXware Power Archiver
Weaknesses CWE-285
Type Values Removed Values Added
First Time appeared Conexware
Conexware powerarchiver
Vendors & Products Conexware
Conexware powerarchiver
Type Values Removed Values Added
Description An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jul 24, 2026, 7:13 PM
Reserved
Jun 16, 2025, 12:00 AM
Status
Deferred
Published
Jul 22, 2026, 9:17 PM
Modified
Oct 13, 2026, 9:10 AM