Back
CVE-2025-1880
i-Drive i11/i12 Device Pairing authentication bypass
Low1.0EPSS 0.25%
- Published
- Updated
- Reserved
- Assigned by
- VulDB
Description
A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as problematic. Affected is an unknown function of the component Device Pairing. The manipulation leads to authentication bypass by primary weakness. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| VulDBCNA (assigner) | 4.0 | Low1.0 | CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
| VulDBCNA (assigner) | 3.1 | Low2.0 | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
| VulDBCNA (assigner) | 3.0 | Low2.0 | CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
| VulDBCNA (assigner) | 2.0 | Low1.2 | AV:L/AC:H/Au:N/C:P/I:N/A:N |
| NVDNVD · Analyzed | 4.0 | Low1.0 | CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.25% · top 83% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 1.0.
Weakness
Affected products
References (4)
- VDB-298194 | i-Drive i11/i12 Device Pairing authentication bypass (opens in a new tab)vdb-entry
- VDB-298194 | CTI Indicators (IOB, IOC) (opens in a new tab)signaturepermissions-required
- Submit #510951 | i-DRIVE Dashcam i11, i12 Authentication Bypass by Primary Weakness (opens in a new tab)third-party-advisory
- https://github.com/geo-chen/i-Drive (opens in a new tab)related
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2025-1880)Record last updated .