PatchTheCVEidrive vulnerabilities
Recent CVEs affecting idrive products. 7 tracked.
idrive has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2021-07-15. Highest priority: CVE-2021-34690 (score 57/100).
- CVE-2021-34692 HIGH 7.8 UPGRADE iDrive RemotePC before 7.6.48 on Windows allows privilege escalation
- CVE-2021-34691 HIGH 7.5 UPGRADE iDrive RemotePC before 4.0.1 on Linux allows denial of service
- CVE-2021-34690 CRITICAL 9.8 UPGRADE iDrive RemotePC before 7.6.48 on Windows allows authentication bypass
- CVE-2021-34689 MEDIUM 5.5 UPGRADE iDrive RemotePC before 7.6.48 on Windows allows information disclosure
- CVE-2021-34688 LOW 3.3 UPGRADE iDrive RemotePC before 7.6.48 on Windows allows information disclosure
- CVE-2021-34687 MEDIUM 5.3 UPGRADE iDrive RemotePC before 7.6.48 on Windows allows information disclosure
- CVE-2020-15351 HIGH 7.8 UPGRADE IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder pe
FAQ
How do I fix idrive vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is idrive being exploited right now?
None of the tracked idrive CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which idrive CVE should I patch first?
CVE-2021-34690 currently ranks highest (57/100): iDrive RemotePC before 7.6.48 on Windows allows authentication bypass.