Description
An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*. An incomplete configuration (agent authentication) in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES (DriveLock Enterprise Service).
Advisories 1
- WID-SEC-2025-2879 DriveLock: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 18, 2025