PT-2025-39644 · Drivelock · Drivelock

Published 2025-09-26 · Updated 2025-09-29 · CVE-2025-55187

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DriveLock versions 24.1.4 through 24.1.5 DriveLock versions 24.2.5 through 24.2.6 DriveLock versions 25.1.2 through 25.1.4

Description Attackers can gain elevated privileges in the software. The issue allows for remote exploitation, potentially putting systems at risk.

Recommendations Update DriveLock to version 24.1.5 or later. Update DriveLock to version 24.2.6 or later. Update DriveLock to version 25.1.4 or later.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-55187

Affected Products

Drivelock

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-55187 · Security Note
• https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm · Vendor Advisory
• https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55187 · Vendor Advisory
• https://twitter.com/CVEnew/status/1971598945060040810 · Twitter Post
• https://twitter.com/autumn_good_35/status/1972697741169160592 · Twitter Post
• https://twitter.com/CCBalert/status/1972686896644964505 · Twitter Post
• https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/NewRelease/Aenderungen_Patch2.htm · Note
• https://t.me/cveNotify/136860 · Telegram Post
• https://twitter.com/NightfallCVE/status/1971598858489930206 · Twitter Post