CVE-2021-4199CWE-732

Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)

High · published March 7, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-03-07T11:35Z
EPSS history
Timeline
  • 07 MAR 11:35Z
    Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)
    cvelistv5