PT-2025-9565 · Idrive · I-Drive

Geochen · Publicado 2025-03-03 · Atualizado 2025-03-04 · CVE-2025-1880

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions i-Drive versions i11 and i12 up to 20250227

Description A problematic issue was found in the Device Pairing component, allowing for authentication bypass by primary weakness. The complexity of an attack is rather high, and the exploitability is difficult. It is possible to launch the attack on the physical device.

Recommendations For i-Drive versions i11 and i12 up to 20250227, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

CWE-305

Identificadores relacionados

CVE-2025-1880

Produtos afetados

I-Drive

Referências · 8

• https://vuldb.com/?id.298194 · Nota
• https://github.com/geo-chen/i-Drive · Nota
• https://t.me/cvedetector/19413 · Publicação no Telegram
• https://vuldb.com/?submit.510951 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-1880 · Nota de Segurança
• https://twitter.com/CVEnew/status/1896767557043978689 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-1880 · Aviso do Fabricante
• https://vuldb.com/?ctiid.298194 · Nota