An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate a DriveLock process to execute arbitrary commands on Windows computers.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Drivelock | Drivelock | 24.1 (including) | 24.1.6 (excluding) |
| Drivelock | Drivelock | 24.2 (including) | 24.2.7 (excluding) |
| Drivelock | Drivelock | 25.1 (including) | 25.1.5 (excluding) |