CVE-2025-0289:
First published: Mon Mar 03 2025(Updated: )
Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Paragon Partition Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.bleepingcomputer.com/news/security/ransomware-gangs-exploit-paragon-partition-manager-bug-in-byovd-attacks/
- https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys
- https://www.kb.cert.org/vuls/id/726882
Frequently Asked Questions
What is the severity of CVE-2025-0289?
CVE-2025-0289 is classified as a high severity vulnerability due to the potential for exploitation that could lead to unauthorized access or system compromise.
How do I fix CVE-2025-0289?
To fix CVE-2025-0289, update to the latest version of Paragon Partition Manager that includes the security patch for the identified vulnerability.
What versions of Paragon Partition Manager are affected by CVE-2025-0289?
CVE-2025-0289 affects both the community and business versions of Paragon Partition Manager version 17.
What type of vulnerability is CVE-2025-0289?
CVE-2025-0289 is an insecure kernel resource access vulnerability that allows attackers to exploit the driver’s mismanagement of the MappedSystemVa pointer.
Who can be impacted by CVE-2025-0289?
Users and organizations utilizing Paragon Partition Manager version 17 are at risk of being impacted by CVE-2025-0289 if they do not apply the necessary security updates.
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2025-0289
- alias/CVE-2025-0298
- agent/news-ai
- zeroday/true
- exploited/true
- agent/severity
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/source
- agent/author
- agent/tags
- agent/trending
- agent/event
- vendor/paragon
- canonical/paragon partition manager