CVE-2025-1879

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.
References
Link Resource
https://github.com/geo-chen/i-Drive Third Party Advisory
https://vuldb.com/?ctiid.298193 Permissions Required
https://vuldb.com/?id.298193 Third Party Advisory
https://vuldb.com/?submit.510950 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:i-drive:i11_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:i-drive:i11:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:i-drive:i12_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:i-drive:i12:*:*:*:*:*:*:*:*

History

05 Mar 2025, 14:05

Type Values Removed Values Added
First Time I-drive i12 Firmware
I-drive
I-drive i12
I-drive i11
I-drive i11 Firmware
CVSS v2 : unknown
v3 : 2.4
v2 : unknown
v3 : 6.8
CPE cpe:2.3:o:i-drive:i12_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:i-drive:i11_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:i-drive:i12:*:*:*:*:*:*:*:*
cpe:2.3:h:i-drive:i11:*:*:*:*:*:*:*:*
References () https://github.com/geo-chen/i-Drive - () https://github.com/geo-chen/i-Drive - Third Party Advisory
References () https://vuldb.com/?submit.510950 - () https://vuldb.com/?submit.510950 - Third Party Advisory
References () https://vuldb.com/?ctiid.298193 - () https://vuldb.com/?ctiid.298193 - Permissions Required
References () https://vuldb.com/?id.298193 - () https://vuldb.com/?id.298193 - Third Party Advisory

03 Mar 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-03 20:15

Updated : 2025-03-05 14:05


NVD link : CVE-2025-1879

Mitre link : CVE-2025-1879


JSON object : View

Products Affected

i-drive

  • i11_firmware
  • i12_firmware
  • i11
  • i12
CWE
CWE-798

Use of Hard-coded Credentials

CWE-259

Use of Hard-coded Password