CVE-2025-55187
critical · 9.9In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.
9.9
CVSS
0.4%
EPSS (exploit prob.)
38th
EPSS percentile
2025-09-26
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-269
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| drivelock | drivelock | 24.1.4 |
| drivelock | drivelock | 24.2.5 |
| drivelock | drivelock | 25.1.2 |
Check a specific version with /api/v1/cve/match.
References
- https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/NewRelease/Aenderungen_Patch2.htm
- https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm
- https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2025-55187