PT-2025-26185 · Peak System · Peak-System Driver

Viacheslav Moskvin · Published 2025-06-18 · Updated 2025-06-21 · CVE-2025-6217

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: PEAK-System Driver (affected versions not specified)

Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the handling of the PCANFD ADD FILTERS IOCTL, resulting from the lack of proper locking when performing operations on an object. This can be leveraged to execute arbitrary code in the context of the kernel.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2025-6217

ZDI-25-408

Affected Products

Peak-System Driver

References · 5

• https://zerodayinitiative.com/advisories/ZDI-25-408 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6217 · Security Note
• https://twitter.com/CVEnew/status/1936472515078991950 · Twitter Post
• https://t.me/cvetracker/26722 · Telegram Post