CVE-2025-55187

Published: Sep 26, 2025Modified: Oct 8, 2025

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.

Affected (3)

Products: Drivelock: Drivelock

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Drivelock Drivelock	Version 24.1.4
Drivelock Drivelock	Version 24.2.5
Drivelock Drivelock	Version 25.1.2

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (3)

https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/NewRelease/Aenderungen_Patch2.htm

Source: cve@mitre.org

Release Notes

https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm

Source: cve@mitre.org

Vendor Advisory

https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm

Source: cve@mitre.org

Vendor Advisory

Timeline

No history available yet.