PT-2025-44189 · Prevx · Prevx 3.0.5.220

Published 2025-10-28 · Updated 2025-10-29 · CVE-2025-60349

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Prevx version 3.0.5.220

Description A flaw exists in Prevx that could allow attackers to cause a denial of service. This can be achieved by sending IOCTL code 0x22E044 to the pxscan.sys driver. Specifically, processes listed under the registry key HKEY LOCAL MACHINESystemCurrentControlSetServicespxscanFiles will be terminated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-60349

Affected Products

Prevx 3.0.5.220

References · 6

• 🔥 https://github.com/djackreuter/CVE-2025-60349 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60349 · Security Note
• https://t.me/CVEtracker/35978 · Telegram Post
• http://prevx.com · Note
• https://t.me/cveNotify/140831 · Telegram Post
• https://twitter.com/CVEnew/status/1983214811040362573 · Twitter Post