{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0287", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2025-01-06T19:15:09.799Z", "datePublished": "2025-03-03T16:25:08.481Z", "dateUpdated": "2025-04-14T20:19:37.196Z"}, "containers": {"cna": {"title": "CVE-2025-0287", "descriptions": [{"lang": "en", "value": "Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Paragon Software", "product": "Migrate OS to SSD", "versions": [{"status": "affected", "version": "4", "lessThanOrEqual": "5", "versionType": "custom"}]}, {"vendor": "Paragon Software", "product": "Disk Wiper", "versions": [{"status": "affected", "version": "15", "lessThanOrEqual": "16", "versionType": "custom"}]}, {"vendor": "Paragon Software", "product": "Drive Copy", "versions": [{"status": "affected", "version": "15", "lessThanOrEqual": "16", "versionType": "custom"}]}, {"vendor": "Paragon Software", "product": "Backup and Recovery", "versions": [{"status": "affected", "version": "15", "lessThanOrEqual": "17.39", "versionType": "custom"}]}, {"vendor": "Paragon Software", "product": "Hard Disk Manager", "versions": [{"status": "affected", "version": "15", "lessThanOrEqual": "17.39", "versionType": "custom"}]}, {"vendor": "Paragon Software", "product": "Partition Manager", "versions": [{"status": "affected", "version": "15", "lessThanOrEqual": "17.39", "versionType": "custom"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-476 NULL Pointer Dereference"}]}], "references": [{"url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys"}, {"url": "https://www.kb.cert.org/vuls/id/726882"}, {"url": "https://www.paragon-software.com/support/#patches"}], "x_generator": {"engine": "VINCE 3.0.14", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2025-0287"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2025-04-14T20:19:37.196Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-476", "lang": "en", "description": "CWE-476 NULL Pointer Dereference"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-03-03T19:22:13.884895Z", "id": "CVE-2025-0287", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T19:30:13.214Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-0287", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-03T19:22:13.884895Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T19:28:49.817Z"}}], "cna": {"title": "CVE-2025-0287", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Paragon Software", "product": "Migrate OS to SSD", "versions": [{"status": "affected", "version": "4", "versionType": "custom", "lessThanOrEqual": "5"}]}, {"vendor": "Paragon Software", "product": "Disk Wiper", "versions": [{"status": "affected", "version": "15", "versionType": "custom", "lessThanOrEqual": "16"}]}, {"vendor": "Paragon Software", "product": "Drive Copy", "versions": [{"status": "affected", "version": "15", "versionType": "custom", "lessThanOrEqual": "16"}]}, {"vendor": "Paragon Software", "product": "Backup and Recovery", "versions": [{"status": "affected", "version": "15", "versionType": "custom", "lessThanOrEqual": "17.39"}]}, {"vendor": "Paragon Software", "product": "Hard Disk Manager", "versions": [{"status": "affected", "version": "15", "versionType": "custom", "lessThanOrEqual": "17.39"}]}, {"vendor": "Paragon Software", "product": "Partition Manager", "versions": [{"status": "affected", "version": "15", "versionType": "custom", "lessThanOrEqual": "17.39"}]}], "references": [{"url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys"}, {"url": "https://www.kb.cert.org/vuls/id/726882"}, {"url": "https://www.paragon-software.com/support/#patches"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.14", "origin": "https://cveawg.mitre.org/api/cve/CVE-2025-0287"}, "descriptions": [{"lang": "en", "value": "Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2025-04-14T20:19:37.196Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0287", "state": "PUBLISHED", "dateUpdated": "2025-04-14T20:19:37.196Z", "dateReserved": "2025-01-06T19:15:09.799Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2025-03-03T16:25:08.481Z", "assignerShortName": "certcc"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:paragon-software:paragon_backup_\\&_recovery:*:*:*:*:*:*:*:*", "matchCriteriaId": "79494FF3-97A2-4DFA-AFE8-3A4E1C4F2C67", "versionEndIncluding": "17.39", "versionStartIncluding": "15", "vulnerable": true}, {"criteria": "cpe:2.3:a:paragon-software:paragon_disk_wiper:*:*:*:*:*:*:*:*", "matchCriteriaId": "2B71A5C9-A1A5-4965-B430-6401C5D87704", "versionEndIncluding": "16", "versionStartIncluding": "15", "vulnerable": true}, {"criteria": "cpe:2.3:a:paragon-software:paragon_drive_copy:*:*:*:*:*:*:*:*", "matchCriteriaId": "7AEEBDE5-02CD-469E-84BC-4EADCB3BEFC9", "versionEndIncluding": "16", "versionStartIncluding": "15", "vulnerable": true}, {"criteria": "cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "F70FA517-5000-41D9-BAF4-4853C0C2E2F2", "versionEndIncluding": "17.39", "versionStartIncluding": "15", "vulnerable": true}, {"criteria": "cpe:2.3:a:paragon-software:paragon_migrate_os_to_ssd:*:*:*:*:*:*:*:*", "matchCriteriaId": "54699509-C197-4AE6-B1DC-D53365128BD6", "versionEndIncluding": "5", "versionStartIncluding": "4", "vulnerable": true}, {"criteria": "cpe:2.3:a:paragon-software:paragon_partition_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "BDBED8CE-A90D-48DC-89F6-CA5EF10DD12C", "versionEndIncluding": "17.39", "versionStartIncluding": "15", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation."}, {"lang": "es", "value": "Paragon Partition Manager versi\u00f3n 7.9.1 contiene una vulnerabilidad de desreferencia de puntero nulo dentro de biontdrv.sys que es causada por la falta de una estructura MasterLrp v\u00e1lida en el b\u00fafer de entrada, lo que permite a un atacante ejecutar c\u00f3digo arbitrario en el kernel, facilitando la escalada de privilegios."}], "id": "CVE-2025-0287", "lastModified": "2025-06-25T16:49:19.670", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 2.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-03-03T17:15:13.710", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://www.kb.cert.org/vuls/id/726882"}, {"source": "[email protected]", "tags": ["Product"], "url": "https://www.paragon-software.com/support/#patches"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}