CVE-2021-3579

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65 Bitdefender Total Security versions prior to 7.2.1.65

Description The issue is related to incorrect default permissions in the bdservicehost.exe and Vulnerability.Scan.exe components. This allows a local attacker to elevate privileges to NT AUTHORITYSYSTEM.

Recommendations For Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65, update to version 7.2.1.65 or later. For Bitdefender Total Security versions prior to 7.2.1.65, update to version 7.2.1.65 or later. As a temporary workaround, consider restricting access to the bdservicehost.exe and Vulnerability.Scan.exe components until a patch is applied.