Idrive IDrive 安全漏洞

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from IDrive USA. A security vulnerability exists in iDrive RemotePC, which stems from the iDrive RemotePC Allowed Elevation of Privilege on Windows prior to 7.6.48. An attacker can exploit the vulnerability to force...

PT-2021-20646

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 7.6.48 Description: The issue allows information disclosure. A locally authenticated attacker can read an encrypted version of the system's Personal Key in world-readable %PROGRAMDATA% log files. The encrypti...

CVE-2021-34687: Use of a Broken or Risky Cryptographic Algorithm

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher...

PT-2021-20650

Name of the Vulnerable Software and Affected Versions: iDrive RemotePC versions prior to 4.0.1 Description: The issue allows a remote and unauthenticated attacker to disconnect a valid user session by connecting to an ephemeral port, resulting in a denial of service. Recommendations: For versions...

CVE-2021-34692: Inclusion of Functionality from Untrusted Control Sphere

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges...

iDrive RemotePC 信任管理问题漏洞

iDrive RemotePC is remote control software from iDrive, Inc. A trust management issue vulnerability exists in iDrive RemotePC versions prior to 7.6.48 on Windows, where a locally authenticated attacker can read an encrypted version of the system's personal key in an owner-readable %PROGRAMDATA% l...