Vulnerability · Published Oct 28, 2021 · Assigned by Bitdefender
CVE-2021-3579Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe
High 7.8
In plain English
A high-severity incorrect default permissions in ENdpoint Security Tools for Windows from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Official description
Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | ENdpoint Security Tools for Windows | unspecified – before 7.2.1.65 |
| Bitdefender | Total Security | unspecified – before 7.2.1.65 |
Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H