Approved changes feed: RSS · Atom
cpe:2.3:a:bdrive:netdrive:3.17.960:*:*:*:*:*:*:*part: a version: 3.17.960 update: *
| Vendor | Bdrive (bcfdec51-25d6-5486-9b1a-b19845e0a8c2) |
|---|---|
| Product | Netdrive (cec92771-0ec6-5a0e-a9aa-09919c3a1355) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2769 |
vulnerable | 2026-06-08 07:16:58.214853 |
Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
HIGH (7.8)
Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25295.
Published: 2025-04-23T16:51:39.300Z
Updated: 2025-04-23T17:59:45.711Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2768 |
vulnerable | 2026-06-08 07:16:58.214110 |
Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
HIGH (7.8)
Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25041.
Published: 2025-04-23T16:51:28.112Z
Updated: 2025-04-23T18:03:14.680Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.