CVE-2021-3579highCWE-276

CVE-2021-3579: high-severity vulnerability in Bitdefender ENdpoint Security Tools for Windows

Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

Published · Updated

Follow this CVE+ Monitor Total Security+ Monitor Endpoint Security Tools

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.7%
Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Bitdefender · ENdpoint Security Tools for WindowsBitdefender · Total Security
Related CVEs — Bitdefender ENdpoint Security Tools for Windows

In the same product, most dangerous first.

CVE-2021-3576HIGHPrivilege escalation via SeImpersonatePrivilegeEPSS 0.9%CVE-2021-4199HIGHIncorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)EPSS 0.8%CVE-2020-15732MEDIUMCVE-2020-15732EPSS 0.6%CVE-2021-4198MEDIUMmessaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)EPSS 0.5%CVE-2020-8107HIGHProcess Control vulnerability in Bitdefender Antivirus PlusEPSS 0.3%CVE-2023-6055HIGHImproper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)EPSS 0.2%