CVE-2021-4199: Bitdefender Total Security Link Following Local Privilege Escalation Vulnerability
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Bitdefender Auxiliary Service. By creating a symbolic link, an attacker can abuse the service to overwrite a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
— ZDI
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-4199?
CVE-2021-4199 is a vulnerability in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows that allows a remote attacker to escalate local privileges to SYSTEM.
What is the severity of CVE-2021-4199?
The severity of CVE-2021-4199 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2021-4199?
Bitdefender Antivirus Plus up to version 26.0.3.29, Bitdefender Endpoint Security Tools up to version 7.4.3.146, BitDefender Internet Security up to version 26.0.3.29, and Bitdefender Total Security up to version 26.0.3.29 are affected by CVE-2021-4199.
How can I fix CVE-2021-4199?
To fix CVE-2021-4199, it is recommended to update Bitdefender Total Security, Internet Security, Antivirus Plus, and Endpoint Security Tools for Windows to the latest versions.
Where can I find more information about CVE-2021-4199?
More information about CVE-2021-4199 can be found on the Bitdefender support website and the Zero Day Initiative advisory.