This vulnerability (CVE-2025-14341) affects DivvyDrive versions 4.8.2.19 through before 4.8.3.2 and is characterized by CWE-915 (Improperly controlled modification of dynamically-determined object attributes) and CWE-770 (Allocation of resources without limits or throttling). It allows an attacker to cause excessive allocation of resources and flooding, potentially impacting system availability and integrity. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H) indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, with low confidentiality impact but high integrity and availability impacts. No patch or official remediation is currently documented. The vulnerability is not related to a cloud service and no known exploits have been reported.

The vulnerability can lead to excessive resource allocation and flooding, which may degrade or disrupt the availability of the DivvyDrive service. Integrity of the system can also be impacted due to improperly controlled modification of object attributes. Confidentiality impact is low. The overall impact is high severity as per CVSS 3.1 scoring.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor DivvyDrive Information Technologies Inc. advisories for updates. Until a patch is available, consider limiting exposure of affected versions to untrusted networks and restricting user interactions that could trigger the vulnerability.