CVE-2025-29547
CVSS 3.1 Score 7 of 10 (high)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 476
Summary
CVE-2025-29547 is a vulnerability affecting Rollback Rx Professional version 12.8.0.0. This issue enables local users to initiate a denial of service (DoS) attack through a null pointer dereference found in the shieldm.sys driver file. The vulnerability is triggered by sending a specific IOCtl command (0x96202000) to the driver, leading to unintended behavior and system instability. Local attackers can exploit this weakness to cause disruptions or crashes, potentially impacting the target system's availability and performance.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.