Information Disclosure Vulnerability in PEAK-System Driver
CVE-2025-6217

2.5LOW

Key Information:

Vendor

Peak-system

Status
Driver
Vendor
CVE Published:
21 June 2025

What is CVE-2025-6217?

The PEAK-System Driver contains an information disclosure vulnerability that allows local attackers to access sensitive information under certain conditions. The issue is rooted in the management of the PCANFD_ADD_FILTERS IOCTL operation, where improper locking mechanisms can be exploited. An attacker, who possesses the capability to execute low-privileged code on the target system, can leverage this vulnerability along with others to potentially gain unauthorized access to kernel-level processes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Driver 8.18.0

References

https://www.zerodayinitiative.com/advisories/ZDI-25-408/
x_research-advisory

CVSS V3.1

Score:
2.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.