CVE Catalog

CVE-2021-4480

HighCVSS 8.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions, allowing local attackers to execute arbitrary code with elevated privileges.

Risk Assessment

Attackers can replace binaries or loaded modules to execute code with NT SYSTEM privileges, leading to full system control.

Recommendation

Update Dräger Protector Software to version 6.4.2 or later.

Other vulnerabilities in Dräger Protector Software

Original NVD description (English source)

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS