ZDI-CAN-22245: ZDI-25-023: Avira Prime System Speedup Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-9523.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22245?
ZDI-CAN-22245 has been assigned a CVSS rating of 7.8, indicating a high severity level.
How does ZDI-CAN-22245 allow privilege escalation?
ZDI-CAN-22245 allows local attackers to escalate privileges by executing low-privileged code on affected installations of Avira Prime.
Who is affected by ZDI-CAN-22245?
ZDI-CAN-22245 affects installations of Avira Prime, specifically those where low-privileged code can be executed.
What conditions must be met to exploit ZDI-CAN-22245?
To exploit ZDI-CAN-22245, an attacker must first gain the ability to execute low-privileged code on the target system.
What steps can be taken to mitigate ZDI-CAN-22245?
To mitigate ZDI-CAN-22245, users should update to the latest version of Avira Prime that addresses this vulnerability.