ZDI-CAN-22246: ZDI-25-024: Avira Prime System Speedup Service Link Following Local Privilege Escalation Vulnerability

Published Jan 9, 2025

Updated

This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-9524.

Affected Software

1 affected component

Avira Prime

Event History

Jan 9, 2025

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-22246?

The severity of ZDI-CAN-22246 is rated at 7.8 on the CVSS scale, indicating a high level of risk.

How can I fix ZDI-CAN-22246?

To fix ZDI-CAN-22246, it is recommended to update Avira Prime to the latest version provided by the vendor.

Who is affected by ZDI-CAN-22246?

ZDI-CAN-22246 affects installations of Avira Prime that have not been updated to address this privilege escalation vulnerability.

What type of attacks can ZDI-CAN-22246 enable?

ZDI-CAN-22246 can enable local attackers to escalate privileges on affected systems if they can execute low-privileged code.

What is the nature of ZDI-CAN-22246?

ZDI-CAN-22246 is a privilege escalation vulnerability that requires local access to exploit.