2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Migrate OS to SSD","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"5","status":"affected","version":"4","versionType":"custom"}]},{"product":"Disk Wiper","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"16","status":"affected","version":"15","versionType":"custom"}]},{"product":"Drive Copy","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"16","status":"affected","version":"15","versionType":"custom"}]},{"product":"Backup and Recovery","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]},{"product":"Hard Disk Manager","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]},{"product":"Partition Manager","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:paragon-software:paragon_backup_\\&_recovery:*:*:*:*:*:*:*:*","matchCriteriaId":"79494FF3-97A2-4DFA-AFE8-3A4E1C4F2C67","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_disk_wiper:*:*:*:*:*:*:*:*","matchCriteriaId":"2B71A5C9-A1A5-4965-B430-6401C5D87704","versionEndIncluding":"16","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_drive_copy:*:*:*:*:*:*:*:*","matchCriteriaId":"7AEEBDE5-02CD-469E-84BC-4EADCB3BEFC9","versionEndIncluding":"16","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"F70FA517-5000-41D9-BAF4-4853C0C2E2F2","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*:*:*:*:*:*:*:*","matchCriteriaId":"54699509-C197-4AE6-B1DC-D53365128BD6","versionEndIncluding":"5","versionStartIncluding":"4","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_partition_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"BDBED8CE-A90D-48DC-89F6-CA5EF10DD12C","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation."},{"lang":"es","value":"Paragon Partition Manager versión 7.9.1 contiene una vulnerabilidad de desreferencia de puntero nulo dentro de biontdrv.sys que es causada por la falta de una estructura MasterLrp válida en el búfer de entrada, lo que permite a un atacante ejecutar código arbitrario en el kernel, facilitando la escalada de privilegios."}],"id":"CVE-2025-0287","lastModified":"2026-06-17T08:26:13.040","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.5,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0287","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-03T19:22:13.884895Z","version":"2.0.3"}}]},"published":"2025-03-03T17:15:13.710","references":[{"source":"cret@cert.org","tags":["Vendor Advisory"],"url":"https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys"},{"source":"cret@cert.org","tags":["Third Party Advisory"],"url":"https://www.kb.cert.org/vuls/id/726882"},{"source":"cret@cert.org","tags":["Product"],"url":"https://www.paragon-software.com/support/#patches"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|