PT-2021-22984
CVE-2021-40854
·
Published
2021-10-14
·
Updated
2021-10-20
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
AnyDesk versions 6.2.x through 6.2.5
AnyDesk versions 6.3.x through 6.3.2
Description
The issue allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged Notepad process that can launch other applications.
Recommendations
For AnyDesk versions 6.2.x through 6.2.5, update to version 6.2.6 or later.
For AnyDesk versions 6.3.x through 6.3.2, update to version 6.3.3 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾