CVE-2025-67791
CriticalSummary
In DriveLock versions 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*, an incomplete configuration (agent authentication) in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES (DriveLock Enterprise Service).
Risk Assessment
The risk includes the possibility of impersonating agents, which could lead to unauthorized access to services and data in the DriveLock environment.
Recommendation
It is recommended to contact DriveLock vendor for patches or proper agent authentication configuration to prevent impersonation.
Original NVD description (English source)
An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*. An incomplete configuration (agent authentication) in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES (DriveLock Enterprise Service).