Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-3579

Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

Description

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender ENdpoint Security Tools for Windows

  • unspecified to < 7.2.1.65affected

Bitdefender Total Security

  • unspecified to < 7.2.1.65affected

References