CPE Details
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:idrive:idrive:6.7.1.38:*:*:*:*:*:*:*
Informations
Vendor
idriveProduct
idriveVersion
6.7.1.38Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder permissions granting any user modify permission (i.e., NT AUTHORITY\Authenticated Users:(OI)(CI)(M)) to the contents of the directory and its sub-folders. In addition, the program installs a service called IDriveService that runs as LocalSystem. Thus, any standard user can escalate privileges to NT AUTHORITY\SYSTEM by substituting the service's binary with a malicious one. | 7.8 |
High |
2025©
tesweb SA
