https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-34692.htmlhttps://patchthecve.com/cve/CVE-2021-34692.htmlWed, 17 Jun 2026 03:56:21 +0000HIGH 7.8: iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges.https://patchthecve.com/cve/CVE-2021-34691.htmlhttps://patchthecve.com/cve/CVE-2021-34691.htmlWed, 17 Jun 2026 03:56:21 +0000HIGH 7.5: iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a valid user session by connecting to an ephemeral port.https://patchthecve.com/cve/CVE-2021-34690.htmlhttps://patchthecve.com/cve/CVE-2021-34690.htmlWed, 17 Jun 2026 03:56:21 +0000CRITICAL 9.8: iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass cloud authentication to connect and control a system via TCP port 5970 and 5980.https://patchthecve.com/cve/CVE-2021-34689.htmlhttps://patchthecve.com/cve/CVE-2021-34689.htmlWed, 17 Jun 2026 03:56:21 +0000MEDIUM 5.5: iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read the system's Personal Key in world-readable %PROGRAMDATA% log files.https://patchthecve.com/cve/CVE-2021-34688.htmlhttps://patchthecve.com/cve/CVE-2021-34688.htmlWed, 17 Jun 2026 03:56:21 +0000LOW 3.3: iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read an encrypted version of the system's Personal Key in world-readable %PROGRAMDATA% log files. The encryption is done using a hard-coded static key and is therefore reversible by an attackhttps://patchthecve.com/cve/CVE-2021-34687.htmlhttps://patchthecve.com/cve/CVE-2021-34687.htmlWed, 17 Jun 2026 03:56:21 +0000MEDIUM 5.3: iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher.https://patchthecve.com/cve/CVE-2020-15351.htmlhttps://patchthecve.com/cve/CVE-2020-15351.htmlWed, 17 Jun 2026 02:56:32 +0000HIGH 7.8: IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder permissions granting any user modify permission (i.e., NT AUTHORITY\Authenticated Users:(OI)(CI)(M)) to the contents of the directory and its sub-folders. In addition, the program installs a s