CVE-2025-57846

HIGH

8.5

CVSS Score

Published: August 27, 2025 at 05:28 AM UTC

Updated: June 17, 2026 at 09:43 AM UTC

7 products affected across 3 vendorsi-FILTERi-FILTER Browser & Cloud MultiAgenti-FILTER for ZAQ

Using i-フィルター 6.0 by Digital Arts Inc.?

Get instant alerts when new vulnerabilities affect i-フィルター 6.0 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

i-FILTER · Digital Arts

60%

v < 6.00.55

Affected range stops below 6.00.55, so it looks safe — our inference, not a vendor statement

i-FILTER Browser & Cloud MultiAgent · Digital Arts

60%

v < 4.93.R11

Affected range stops below 4.93.R11, so it looks safe — our inference, not a vendor statement

I Filter for Multidevice · Digital Arts

60%

v < 6.00.55

Affected range stops below 6.00.55, so it looks safe — our inference, not a vendor statement

I Filter for Netcafe · Digital Arts

60%

v < 6.10.55

Affected range stops below 6.10.55, so it looks safe — our inference, not a vendor statement

i-FILTER for ZAQ · Digital Arts

60%

v < 6.00.55

Affected range stops below 6.00.55, so it looks safe — our inference, not a vendor statement

FENCE-Mobile RemoteManager · Fujitsu

60%

v < 4.93R11

Affected range stops below 4.93R11, so it looks safe — our inference, not a vendor statement

Optimal Biz Web Filtering Powered by i-FILTER · Optim

60%

v < 4.93R11

Affected range stops below 4.93R11, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (3)

Source: [email protected]

https://jvn.jp/en/jp/JVN55678602/

Source: [email protected]

https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20250827_01.pdf

Source: [email protected]

https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20250827_02.pdf

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.5HIGHjpcert

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-276

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card