CVE-2021-34688

CVE-2021-34688 affects iDrive RemotePC on Windows prior to 7.6.48. A locally authenticated attacker can read an encrypted version of the system’s Personal Key from world-readable log files in %PROGRAMDATA%, because the encryption uses a hard-coded static key, making it reversible. The issue is a ...

CVE-2021-34687

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher...

CVE-2021-34687

CVE-2021-34687 affects iDrive RemotePC on Windows prior to 7.6.48. The vulnerability enables information disclosure where a man-in-the-middle can recover the system Personal Key during a LAN connection, because the key is transmitted over the network with only a substitution cipher for encryption.

iDrive RemotePC encryption issue vulnerabilities

iDrive RemotePC is remote control software from iDrive, Inc. A vulnerability in encryption issues exists in iDrive RemotePC versions prior to 7.6.48 on Windows, which stems from an error in the configuration of the product during operation, among other things. An unauthorized attacker could explo...

PT-2021-20646

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48 Description: The issue allows information disclosure. A locally authenticated attacker can read an encrypted version of the system's Personal Key in world-readable %PROGRAMDATA% log files. The encrypti...

IDrive log information leakage vulnerability

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from US-based IDrive Idrive. A log message disclosure vulnerability exists in iDrive RemotePC versions prior to 7.6.48, where a locally authenticated attacker can read the system's personal key...

iDrive RemotePC Trust Management Vulnerability

iDrive RemotePC is remote control software from iDrive, Inc. A trust management issue vulnerability exists in iDrive RemotePC versions prior to 7.6.48 on Windows, where a locally authenticated attacker can read an encrypted version of the system's personal key in an owner-readable %PROGRAMDATA% l...

CVE-2021-34692: Inclusion of Functionality from Untrusted Control Sphere

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges...

CVE-2021-34687: Use of a Broken or Risky Cryptographic Algorithm

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher...

IDrive security vulnerabilities

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from IDrive USA. A security vulnerability exists in iDrive RemotePC, which stems from the iDrive RemotePC Allowed Elevation of Privilege on Windows prior to 7.6.48. An attacker can exploit the vulnerability to force...

PT-2021-20649

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48 Description: The issue allows a remote and unauthenticated attacker to bypass cloud authentication, enabling them to connect and control a system. This is achieved via TCP port 5970 and 5980...

CVE-2021-34691: Undefined Security Weakness

iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a valid user session by connecting to an ephemeral port...

CVE-2021-34690: Improper Authentication

iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass cloud authentication to connect and control a system via TCP port 5970 and 5980...

CVE-2021-34688: Use of Hard-coded Credentials

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read an encrypted version of the system's Personal Key in world-readable %PROGRAMDATA% log files. The encryption is done using a hard-coded static key and is therefore reversible by an...

CVE-2021-34689: Insertion of Sensitive Information into Log File

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated attacker can read the system's Personal Key in world-readable %PROGRAMDATA% log files...

PT-2021-20645

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48 Description: The issue allows information disclosure, where a man-in-the-middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over...

IDrive authorization issue vulnerability

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from IDrive USA. A security vulnerability exists in iDrive RemotePC versions prior to 7.6.48 that allows an unauthenticated attacker to bypass cloud authentication and connect to and control the system via TCP ports 5970...

IDrive security vulnerabilities

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from IDrive USA. A security vulnerability exists in iDrive RemotePC versions prior to 4.0.1, which can be exploited by an unauthenticated attacker to disconnect a valid user session by connecting to a temporary port...

PT-2021-20651

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48 Description: The issue allows a local and low-privileged user to escalate privileges. This is achieved by forcing RemotePC to execute an attacker-controlled executable with SYSTEM privileges...

PT-2021-20647

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48 Description: The issue allows information disclosure. A locally authenticated attacker can read the system's Personal Key in world-readable %PROGRAMDATA% log files. Recommendations: For versions prior ...