CVE-2021-4481
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions, allowing local attackers to execute arbitrary code with elevated privileges.
Risk Assessment
Attackers can replace binaries or loaded modules to execute code with NT SYSTEM privileges, leading to full system control.
Recommendation
Update Dräger Protector Software to version 6.4.2 or later.
Other vulnerabilities in Dräger Protector Software
Original NVD description (English source)
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.

