[Advisory - DriveLock] DriveLock Enterprise Service - Privilege escalation to Supervisor
| Product: | DriveLock - DriveLock Enterprise Services |
|---|---|
| Homepage: | https://www.drivelock.com/ |
| CVE Number: | CVE-2025-67793 |
| Vulnerable version: | 25.1.5.59577 |
| Fixed version: | 25.1.6 |
| CVSS Score: | HIGH 8.5 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H |
| Found: | Nov 3, 2025 |
Product description
The HYPERSECURE Endpoint Protection Platform ensures that attacks on IT systems are kept where they belong: outside. This means you are secure at the centre, with all paths of access to your sensitive data blocked.
Cite: DriveLock - Homepage
DriveLock Enterprise Service (DES), is the central server component of the DriveLock security platform
Vulnerability overview
…
Proof of Concept
…