2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Migrate OS to SSD","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"5","status":"affected","version":"4","versionType":"custom"}]},{"product":"Disk Wiper","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"16","status":"affected","version":"15","versionType":"custom"}]},{"product":"Drive Copy","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"16","status":"affected","version":"15","versionType":"custom"}]},{"product":"Backup and Recovery","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]},{"product":"Hard Disk Manager","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]},{"product":"Partition Manager","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:paragon-software:paragon_backup_\\&_recovery:*:*:*:*:*:*:*:*","matchCriteriaId":"79494FF3-97A2-4DFA-AFE8-3A4E1C4F2C67","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_disk_wiper:*:*:*:*:*:*:*:*","matchCriteriaId":"2B71A5C9-A1A5-4965-B430-6401C5D87704","versionEndIncluding":"16","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_drive_copy:*:*:*:*:*:*:*:*","matchCriteriaId":"7AEEBDE5-02CD-469E-84BC-4EADCB3BEFC9","versionEndIncluding":"16","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"F70FA517-5000-41D9-BAF4-4853C0C2E2F2","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*:*:*:*:*:*:*:*","matchCriteriaId":"54699509-C197-4AE6-B1DC-D53365128BD6","versionEndIncluding":"5","versionStartIncluding":"4","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_partition_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"BDBED8CE-A90D-48DC-89F6-CA5EF10DD12C","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation."},{"lang":"es","value":"Paragon Partition Manager versión 7.9.1 contiene una vulnerabilidad de memoria de kernel arbitraria facilitada por la función memmove, que no valida ni depura la entrada controlada por el usuario, lo que permite a un atacante escribir memoria de kernel arbitraria y realizar una escalada de privilegios."}],"id":"CVE-2025-0288","lastModified":"2026-06-17T08:26:13.193","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0288","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-04T15:19:14.562640Z","version":"2.0.3"}}]},"published":"2025-03-03T17:15:13.823","references":[{"source":"cret@cert.org","tags":["Vendor Advisory"],"url":"https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys"},{"source":"cret@cert.org","tags":["Third Party Advisory"],"url":"https://www.kb.cert.org/vuls/id/726882"},{"source":"cret@cert.org","tags":["Product"],"url":"https://www.paragon-software.com/support/#patches"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|