CVE-2021-3579 HIGH

CVE-2021-3579: Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

Vendor Bitdefender
Product ENdpoint Security Tools for Windows
Weakness CWE-276
Published October 28, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

Key dates

02Disclosure timeline

October 28, 2021 CVE published
September 16, 2024 Record updated