The eudskacs.sys driver version 20250328 shipped with EaseUs Todo Backup 1.2.0.1 fails to properly validate privileges for I/O requests (IRP_MJ_READ/IRP_MJ_WRITE) sent to its device object. This allows a local, low-privileged attacker to perform arbitrary raw disk reads and writes, leading to sensitive information disclosure, denial of service, or local privilege escalation.
References
| Link | Resource |
|---|---|
| http://easeus.com | Product |
| https://gist.github.com/christopher-ellis-workday/756c998f9f59dd2c437d83e60c7ed220 | Third Party Advisory |
Configurations
History
20 Oct 2025, 14:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://easeus.com - Product | |
| References | () https://gist.github.com/christopher-ellis-workday/756c998f9f59dd2c437d83e60c7ed220 - Third Party Advisory | |
| First Time |
Easeus eudskacs.sys Driver
Easeus |
|
| CPE | cpe:2.3:a:easeus:eudskacs.sys_driver:20250328:*:*:*:*:*:*:* |
10 Sep 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-269 |
10 Sep 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-10 18:15
Updated : 2025-10-20 14:37
NVD link : CVE-2025-50892
Mitre link : CVE-2025-50892
CVE.ORG link : CVE-2025-50892
JSON object : View
Products Affected
easeus
- eudskacs.sys_driver
CWE
CWE-269
Improper Privilege Management