First published: Thu Jul 15 2021(Updated: )
iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
iDrive RemotePC | <7.6.48 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-34692 has a high severity rating due to its potential for privilege escalation allowing a low-privileged user to execute code with SYSTEM privileges.
To fix CVE-2021-34692, update your iDrive RemotePC application to version 7.6.48 or later to ensure the vulnerability is resolved.
CVE-2021-34692 affects users of iDrive RemotePC versions before 7.6.48 on Windows.
Exploits of CVE-2021-34692 could enable attackers to run arbitrary code with elevated SYSTEM privileges on affected systems.
It is not safe to use iDrive RemotePC without updating due to CVE-2021-34692, as this vulnerability poses a significant security risk.