Is CVE-2025-1880 actively exploited?

No active exploitation of CVE-2025-1880 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2025-1880 be exploited remotely?

Partially. CVE-2025-1880 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2025-1880?

CVE-2025-1880 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2025-1880

MEDIUM

CVE-2025-1880

CWE-287Published: March 3, 2025· Updated: Jun 17, 2026

4.3

CVSS v3.1

Official Description

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as problematic. Affected is an unknown function of the component Device Pairing. The manipulation leads to authentication bypass by primary weakness. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.

NVD Source

Technical Analysis

CVE-2025-1880 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.