High WID-SEC-2025-2879 8 CVEs

DriveLock: Mehrere Schwachstellen

Published Dec 17, 2025 · Updated Dec 18, 2025 · Revision 2 · de-DE

Vendor: DriveLock Product: DriveLock Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in DriveLock ausnutzen, um sich erweiterte Berechtigungen zu verschaffen – darunter Administratorrechte –, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder Daten zu manipulieren.

Product

DriveLock ist eine IT-Sicherheitslösung, die Endgeräte und Daten durch einen Zero-Trust-Ansatz vor Cyberangriffen schützt.

Vulnerabilities 8

Critical 9.9

CVE-2025-67781

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged…

Dec 17, 2025
Critical 9.8

CVE-2025-67790

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. An unprivileged us…

Dec 17, 2025
Critical 9.8

CVE-2025-67791

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*. An incomplete c…

Dec 17, 2025
Critical 9.8

CVE-2025-67793

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6. Users with the "…

Dec 17, 2025
Critical 9.6

CVE-2025-67787

An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting (XSS) issue in DriveLock Operations Center allo…

Dec 17, 2025
High 8.8

CVE-2025-67792

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged…

Dec 17, 2025
High 8.4

CVE-2025-67794

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and f…

Dec 17, 2025
Medium 5.3

CVE-2025-67789

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated user…

Dec 17, 2025

Revision history

2025-12-18 #2
Korrektur Plattformauswahl
2025-12-17 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67781
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67787
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67789
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67790
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67791
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67792
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67793
NIST Vulnerability Database vom 2025-12-17
https://nvd.nist.gov/vuln/detail/CVE-2025-67794
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/versions/2025_2/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-002-CrossSiteScripting.htm
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-004-DESInfoDisclosure.htm
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/versions/2025_1/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-005-BufferOverreadBSOD.htm
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-006-DESMisconfig.htm
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/versions/current/web/en/releasenotes/Content/ReleaseNotes_DriveLock/SecurityBulletins/25-007-LocalPrivilegeEsc.htm
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/sb/Content/SecurityBulletins/25-008-DESPrivilegeEsc.htm
DriveLock Security Bulletin vom 2025-12-17
https://drivelock.help/sb/Content/SecurityBulletins/25-009-AgIncPermissions.htm