CVE-2021-26624highCWE-20

CVE-2021-26624: high-severity vulnerability in MicroWorld Technologies Inc.

eScan Anti-Virus Local privilege escalation Vulnerability

Published · Updated

Follow this CVE+ Monitor eScan Antivirus

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 2.4%
An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
MicroWorld Technologies Inc. · eScan Anti-Virus for Linux