CVE-2025-1880CWE-287CWE-305

i-Drive i11/i12 Device Pairing authentication bypass

Low · published March 3, 2025

CVSS v4.0
1.0
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as problematic. Affected is an unknown function of the component Device Pairing. The manipulation leads to authentication bypass by primary weakness. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.

The record
Technical detail
CVSS v4.0
1.0 · LOW
Vector
CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00254 · 16.0th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-305 · Authentication Bypass by Primary Weakness
Published
2025-03-03T20:00Z
EPSS history
Timeline
  • 03 MAR 20:00Z
    i-Drive i11/i12 Device Pairing authentication bypass
    cvelistv5