CVE-2021-3579: (0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability
Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the endpoint client. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
— ZDI
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-3579?
CVE-2021-3579 is a vulnerability that allows local attackers to escalate privileges on affected installations of Bitdefender Total Security.
What software products are affected by CVE-2021-3579?
CVE-2021-3579 affects Bitdefender Total Security and Bitdefender Endpoint Security Tools.
How can this vulnerability be exploited?
In order to exploit CVE-2021-3579, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the severity of CVE-2021-3579?
CVE-2021-3579 has a severity rating of 7.8, which is considered high.
Where can I find more information about CVE-2021-3579?
You can find more information about CVE-2021-3579 on the Bitdefender support website and the Zero Day Initiative advisory.