CVE-2021-3576
Privilege escalation via SeImpersonatePrivilege
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.
Una vulnerabilidad de Ejecución con Privilegios Innecesarios en Bitdefender Endpoint Security Tools, Total Security permite a un atacante local elevarse a "NT AUTHORITY\System". La suplantación permite al hilo del servidor llevar a cabo acciones en nombre del cliente pero dentro de límites del contexto de seguridad del cliente. Este problema afecta a: Bitdefender Endpoint Security Tools versiones anteriores a 7.2.1.65. Bitdefender Total Security versiones anteriores a 25.0.26
This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender GravityZone. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the endpoint client. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-06-02 CVE Reserved
- 2021-10-28 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-250: Execution with Unnecessary Privileges
- CWE-269: Improper Privilege Management
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-21-1276 | Third Party Advisory |
|
| https://www.zerodayinitiative.com/advisories/ZDI-21-1376 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bitdefender Search vendor "Bitdefender" | Endpoint Security Tools Search vendor "Bitdefender" for product "Endpoint Security Tools" | < 7.2.1.65 Search vendor "Bitdefender" for product "Endpoint Security Tools" and version " < 7.2.1.65" | - |
Affected
| ||||||
| Bitdefender Search vendor "Bitdefender" | Total Security Search vendor "Bitdefender" for product "Total Security" | < 25.0.26 Search vendor "Bitdefender" for product "Total Security" and version " < 25.0.26" | - |
Affected
| ||||||