Denial of Service Vulnerability in Rollback Rx Professional by Horizon DataSys
CVE-2025-29547

7HIGH

Key Information:

Vendor

Horizon DataSys

Status
Rollback Rx Professional
Vendor
CVE Published:
22 April 2025

What is CVE-2025-29547?

The Rollback Rx Professional 12.8.0.0 contains a vulnerability within its driver file shieldm.sys, which permits local users to provoke a denial of service situation. This is due to a null pointer dereference triggered by the I/O control command 0x96202000. Attackers exploiting this issue can disrupt system operations, potentially leading to data loss or unavailability of service.

References

https://horizondatasys.com/rollback-rx-time-machine/rollb...
https://packetstorm.news/files/id/190491/

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.