CVE-2021-4480
Last modified
CVE-2021-4480 is a high-severity vulnerability rated 8.3/10 on the CVSS scale. Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Dräger | Protector Software | < 6.4.2 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2021-4480?
How severe is CVE-2021-4480?
How do I fix CVE-2021-4480?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-44790A carefully crafted request body can cause a buffer overflow…9.8
- CVE-2021-44791In Apache Druid 0.22.1 and earlier, certain specially-crafte…6.1
- CVE-2021-44792Single Connect does not perform an authorization check when …5.3
- CVE-2021-44793Single Connect does not perform an authorization check when …8.6
- CVE-2021-44794Single Connect does not perform an authorization check when …5.3
- CVE-2021-44795Single Connect does not perform an authorization check when …5.3
- CVE-2021-4481Dräger Protector Software prior to version 6.4.2 contains a …8.3
- CVE-2021-44827There is remote authenticated OS command injection on TP-Lin…8.8
- CVE-2021-44828Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bif…7.8
- CVE-2021-44829Cross Site Scripting (XSS) vulnerability exists in index.htm…6.1
- CVE-2021-44832Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding s…6.6
- CVE-2021-44833The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions…9.8
Are you affected by CVE-2021-4480?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST