PT-2025-9565 · Idrive · I-Drive

Geochen · Published 2025-03-03 · Updated 2025-03-04 · CVE-2025-1880

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions i-Drive versions i11 and i12 up to 20250227

Description A problematic issue was found in the Device Pairing component, allowing for authentication bypass by primary weakness. The complexity of an attack is rather high, and the exploitability is difficult. It is possible to launch the attack on the physical device.

Recommendations For i-Drive versions i11 and i12 up to 20250227, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

CWE-305

Related Identifiers

CVE-2025-1880

Affected Products

I-Drive

References · 8

• https://vuldb.com/?submit.510951 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1880 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1880 · Vendor Advisory
• https://vuldb.com/?id.298194 · Note
• https://github.com/geo-chen/i-Drive · Note
• https://t.me/cvedetector/19413 · Telegram Post
• https://twitter.com/CVEnew/status/1896767557043978689 · Twitter Post
• https://vuldb.com/?ctiid.298194 · Note