high7.8
CVE-2021-3579
Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for W…
Impact
Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitdefender | Endpoint Security Tools | before 7.2.1.65 |
| Bitdefender | Total Security | before 7.2.1.65 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.bitdefender.com/support/security-advisories/incorrect-default-permissions-vulnerability-in-bdservicehost-exe-and-vulnerability-scan-exe-va-9848/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1277/
- https://www.bitdefender.com/support/security-advisories/incorrect-default-permissions-vulnerability-in-bdservicehost-exe-and-vulnerability-scan-exe-va-9848/
- https://www.zerodayinitiative.com/advisories/ZDI-21-1277/