A SQL injection vulnerability in DriveLock allows authenticated, low-privileged users to escalate their privileges to administrative levels, creating a severe risk of unauthorized system control.

This is a classic SQL injection vulnerability (CWE-89) that requires a low-privileged authenticated user to interact with the application. By injecting malicious SQL commands, an attacker can bypass security restrictions and escalate their current user privileges.

A successful exploit provides an attacker with complete control over the affected DriveLock instance, potentially leading to total compromise of managed endpoints. With a CVSS score of 8.8, the ability to escalate privileges makes this a high-priority risk for any organization relying on DriveLock for security orchestration.

Immediate Action: Update to the latest version of DriveLock as specified by the vendor security advisory to remediate the SQL injection flaw.

Proactive Monitoring: Review database access logs for unusual queries or patterns involving administrative tables that may indicate SQL injection activity.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter and block malicious SQL injection patterns directed at the DriveLock management console.

Public Exploit Available: Unknown

Organizations should prioritize the update provided by DriveLock. Because this vulnerability allows for privilege escalation, it is essential to ensure that all user permissions are reviewed and that the patch is deployed immediately to prevent unauthorized administrative access.