BaseFortify

Publication date: 2025-10-28

Last updated on: 2026-07-05

Assigner: MITRE

Description

An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sys driver. Any processes listed under registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files will be terminated.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-28

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2025-10-28

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60349

Affected Vendors & Products

Vendor	Product	Version / Range
prevx	pxscan	3.0.5.220

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Prevx v3.0.5.220 and allows attackers to cause a denial of service by sending a specific IOCTL code (0x22E044) to the pxscan.sys driver. When this code is sent, any processes listed under the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pxscan\Files will be terminated.

Impact Analysis

The vulnerability can impact you by causing a denial of service condition, where critical processes related to the pxscan.sys driver are terminated unexpectedly. This could disrupt normal system operations and potentially cause system instability or downtime.

Hi! I’m here to help you understand CVE-2025-60349. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70