CVE-2025-2768

Summary

CVE-2025-2768 is a local privilege escalation vulnerability affecting Bdrive NetDrive. This issue allows attackers to escalate privileges by exploiting a misconfigured OpenSSL file loading process. The OpenSSL configuration file is loaded from an unsecured location, enabling attackers to manipulate it and gain SYSTEM-level access. To exploit this vulnerability, an attacker must initially have the ability to execute low-privileged code on the affected system. This vulnerability, previously identified as ZDI-CAN-25041, poses a significant risk to systems running Bdrive NetDrive.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.