PT-2025-14872 · Elaborate Bytes Ag · Virtual Clonedrive

Neodyme Ag · Published 2025-04-04 · Updated 2025-07-07 · CVE-2025-1865

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue concerns a kernel driver that is accessible to low-privileged users. This driver exposes a function that fails to properly validate the privileges of the calling process, allowing for the creation of files at arbitrary locations with full user control. This ultimately enables privilege escalation to SYSTEM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-1865

Affected Products

Virtual Clonedrive

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-1865 · Security Note
• https://t.me/cvenotify/127914 · Telegram Post
• https://twitter.com/CVEnew/status/1908438500866773209 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1908118664429109291 · Twitter Post
• https://neodyme.io/de/advisories/cve-2025-1865 · Note
• https://t.me/cvenotify/117723 · Telegram Post
• https://twitter.com/cybercronai/status/1908210756908179960 · Twitter Post
• https://t.me/cvedetector/22120 · Telegram Post
• https://t.me/cvetracker/20806 · Telegram Post
• https://elby.ch/de/products/vcd.html · Note
• https://twitter.com/VulmonFeeds/status/1908127198642368706 · Twitter Post