CVE-2025-1879: i-Drive i11/i12 APK hard-coded credentials

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-03 · updated 2026-06-17
Weakness: CWE-259

Description

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.

Affected products

i-Drive I11 Firmware: through 20250227
i-Drive I12 Firmware: through 20250227

References

https://github.com/geo-chen/i-Drive
https://vuldb.com/?ctiid.298193
https://vuldb.com/?id.298193
https://vuldb.com/?submit.510950

Get alerted when CVE-2025-1879 or the next vulnerability affects your stack