CVE-2025-1881

5.3 mediumEPSS 0.3%

Medium (5.3) in i-drive. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotely. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-284
Published: 2025-03-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

i-drive:i11_firmware
i-drive:i12_firmware

References

https://github.com/geo-chen/i-Drive
https://vuldb.com/?ctiid.298195
https://vuldb.com/?id.298195
https://vuldb.com/?submit.510952

Check your stack JSON