ByteOS Network

NVD Vulnerability Details :

CVE-2025-0289

Awaiting Analysis

Source-cret@cert.org

Published At-03 Mar, 2025 | 17:15

Updated At-14 Apr, 2025 | 21:15

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Source	Resource
https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys	cret@cert.org	N/A
https://www.kb.cert.org/vuls/id/726882	cret@cert.org	N/A
https://www.paragon-software.com/support/#patches	cret@cert.org	N/A

Hyperlink: https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys

Source: cret@cert.org

Resource: N/A

Hyperlink: https://www.kb.cert.org/vuls/id/726882

Source: cret@cert.org

Resource: N/A

Hyperlink: https://www.paragon-software.com/support/#patches

Source: cret@cert.org

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History