DriveLock Agent Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in DriveLock Agent versions 24.1.4 prior to 24.1.5, 24.2.5 prior to 24.2.6, and 25.1.2 prior to 25.1.4. This vulnerability allows remote attackers on the same network to gain elevated privileges on affected Windows systems due to incorrect access control.

Impact

Exploitation of this vulnerability allows for remote privilege escalation on affected Windows systems.

Remediation

Users are advised to update to DriveLock versions 24.1.5, 24.2.6, or 25.1.4. For those using older versions, which are also affected but no longer receive patches, consult the DriveLock End-of-Life information for guidance on supported versions.