A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as problematic. Affected is an unknown function of the component Device Pairing. The manipulation leads to authentication bypass by primary weakness. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.
References
| Link | Resource |
|---|---|
| https://github.com/geo-chen/i-Drive | Third Party Advisory |
| https://vuldb.com/?ctiid.298194 | Permissions Required |
| https://vuldb.com/?id.298194 | Permissions Required |
| https://vuldb.com/?submit.510951 | Vendor Advisory |
Configurations
History
05 Mar 2025, 14:05
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CPE | cpe:2.3:o:i-drive:i12_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:i-drive:i11_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:i-drive:i12:*:*:*:*:*:*:*:* cpe:2.3:h:i-drive:i11:*:*:*:*:*:*:*:* |
|
| First Time |
I-drive i12 Firmware
I-drive I-drive i12 I-drive i11 I-drive i11 Firmware |
|
| References | () https://github.com/geo-chen/i-Drive - Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.298194 - Permissions Required | |
| References | () https://vuldb.com/?id.298194 - Permissions Required | |
| References | () https://vuldb.com/?submit.510951 - Vendor Advisory |
03 Mar 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-03 20:15
Updated : 2025-03-05 14:05
NVD link : CVE-2025-1880
Mitre link : CVE-2025-1880
JSON object : View
Products Affected
i-drive
- i11_firmware
- i12_firmware
- i11
- i12