CVE-2021-3579CWE-276

Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

High · published October 28, 2021

CVSS v3.1
7.8
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00693 · 52.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-10-28T13:50Z
EPSS history
Timeline
  • 28 OCT 13:50Z
    Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe
    cvelistv5