2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Migrate OS to SSD","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"5","status":"affected","version":"4","versionType":"custom"}]},{"product":"Disk Wiper","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"16","status":"affected","version":"15","versionType":"custom"}]},{"product":"Drive Copy","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"16","status":"affected","version":"15","versionType":"custom"}]},{"product":"Hard Disk Manager","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]},{"product":"Backup and Recovery","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]},{"product":"Partition Manager","vendor":"Paragon Software","versions":[{"lessThanOrEqual":"17.39","status":"affected","version":"15","versionType":"custom"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:paragon-software:paragon_backup_\\&_recovery:*:*:*:*:*:*:*:*","matchCriteriaId":"79494FF3-97A2-4DFA-AFE8-3A4E1C4F2C67","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_disk_wiper:*:*:*:*:*:*:*:*","matchCriteriaId":"2B71A5C9-A1A5-4965-B430-6401C5D87704","versionEndIncluding":"16","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_drive_copy:*:*:*:*:*:*:*:*","matchCriteriaId":"7AEEBDE5-02CD-469E-84BC-4EADCB3BEFC9","versionEndIncluding":"16","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"F70FA517-5000-41D9-BAF4-4853C0C2E2F2","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*:*:*:*:*:*:*:*","matchCriteriaId":"54699509-C197-4AE6-B1DC-D53365128BD6","versionEndIncluding":"5","versionStartIncluding":"4","vulnerable":true},{"criteria":"cpe:2.3:a:paragon-software:paragon_partition_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"BDBED8CE-A90D-48DC-89F6-CA5EF10DD12C","versionEndIncluding":"17.39","versionStartIncluding":"15","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service."},{"lang":"es","value":"La versión 17 de Paragon Partition Manager, tanto la versión comunitaria como la empresarial, contienen una vulnerabilidad de acceso inseguro a los recursos del kernel facilitada por el controlador que no valida el puntero MappedSystemVa antes de pasarlo a HalReturnToFirmware, lo que puede permitir a un atacante comprometer el servicio."}],"id":"CVE-2025-0289","lastModified":"2026-06-17T08:26:13.337","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0289","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-03-04T15:21:49.572240Z","version":"2.0.3"}}]},"published":"2025-03-03T17:15:13.943","references":[{"source":"cret@cert.org","tags":["Vendor Advisory"],"url":"https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys"},{"source":"cret@cert.org","tags":["Third Party Advisory"],"url":"https://www.kb.cert.org/vuls/id/726882"},{"source":"cret@cert.org","tags":["Product"],"url":"https://www.paragon-software.com/support/#patches"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|