Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-0285
PUBLISHED
More InfoOfficial Page
Assigner-certcc
Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b
View Known Exploited Vulnerability (KEV) details
Published At-03 Mar, 2025 | 16:25
Updated At-15 Apr, 2025 | 15:15
Rejected At-
▼CVE Numbering Authority (CNA)
CVE-2025-0285

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.

Affected Products
Vendor
Paragon Software
Product
Partition Manager
Versions
Affected
  • From 15 through 17.39 (custom)
Vendor
Paragon Software
Product
Hard Disk Manager
Versions
Affected
  • From 15 through 17.39 (custom)
Vendor
Paragon Software
Product
Backup and Recovery
Versions
Affected
  • From 15 through 17.39 (custom)
Vendor
Paragon Software
Product
Paragon Drive Copy
Versions
Affected
  • From 15 through 16 (custom)
Vendor
Paragon Software
Product
Disk Wiper
Versions
Affected
  • From 15 through 16 (custom)
Vendor
Paragon Software
Product
Migrate OS to SSD
Versions
Affected
  • From 4 through 5 (custom)
Problem Types
TypeCWE IDDescription
N/AN/ACWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
N/AN/ACWE-20 Improper Input Validation
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys
N/A
https://www.kb.cert.org/vuls/id/726882
N/A
https://www.paragon-software.com/support/#patches
N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found