CVE-2025-55187

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55187
In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.

9.9 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/NewRelease/Aenderungen_Patch2.htm Release Notes
https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm Vendor Advisory
https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:drivelock:drivelock:24.1.4:*:*:*:*:*:*:*
cpe:2.3:a:drivelock:drivelock:24.2.5:*:*:*:*:*:*:*
cpe:2.3:a:drivelock:drivelock:25.1.2:*:*:*:*:*:*:*
History

08 Oct 2025, 20:20

Type Values Removed Values Added
First Time Drivelock drivelock
Drivelock
References () https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/NewRelease/Aenderungen_Patch2.htm - () https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/NewRelease/Aenderungen_Patch2.htm - Release Notes
References () https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm - () https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm - Vendor Advisory
References () https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm - () https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm - Vendor Advisory
CPE cpe:2.3:a:drivelock:drivelock:24.1.4:*:*:*:*:*:*:*
cpe:2.3:a:drivelock:drivelock:24.2.5:*:*:*:*:*:*:*
cpe:2.3:a:drivelock:drivelock:25.1.2:*:*:*:*:*:*:*

26 Sep 2025, 18:15

Type Values Removed Values Added
References
  • () https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-001-RemotePriviledge.htm -

26 Sep 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-26 15:16

Updated : 2025-10-08 20:20

NVD link : CVE-2025-55187

Mitre link : CVE-2025-55187

CVE.ORG link : CVE-2025-55187

JSON object : View

Products Affected

drivelock

  • drivelock
CWE
CWE-269

Improper Privilege Management