CVE-2021-26624CWE-20

eScan Anti-Virus Local privilege escalation Vulnerability

High · published April 1, 2022

CVSS v3.1
7.8
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02412 · 84.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-04-01T22:17Z
EPSS history
Timeline
  • 01 APR 22:17Z
    eScan Anti-Virus Local privilege escalation Vulnerability
    cvelistv5