CVE-2021-4199highCWE-732

CVE-2021-4199: falha de alta gravidade em Bitdefender Total Security

Incorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Total Security+ Monitorar Internet Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.8%
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Bitdefender · Antivirus PlusBitdefender · Endpoint Security Tools for WindowsBitdefender · Internet SecurityBitdefender · Total Security
CVEs relacionadas — Bitdefender Total Security

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0677HIGHImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)EPSS 1.2%CVE-2020-15733MEDIUMURL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)EPSS 0.6%CVE-2020-15732MEDIUMCVE-2020-15732EPSS 0.6%CVE-2021-4198MEDIUMmessaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)EPSS 0.5%CVE-2020-8107HIGHProcess Control vulnerability in Bitdefender Antivirus PlusEPSS 0.3%CVE-2023-6154HIGHLocal privilege escalation in Bitdefender Total Security (VA-11168)EPSS 0.2%