PT-2022-11521

CVE-2021-4199

·

Published

2022-03-07

·

Updated

2022-03-11

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 26.0.10.45 Bitdefender Internet Security versions prior to 26.0.10.45 Bitdefender Antivirus Plus versions prior to 26.0.10.45 Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146
Description The issue is related to an Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe. This vulnerability allows a remote attacker to escalate local privileges to SYSTEM.
Recommendations For Bitdefender Total Security versions prior to 26.0.10.45, update to version 26.0.10.45 or later. For Bitdefender Internet Security versions prior to 26.0.10.45, update to version 26.0.10.45 or later. For Bitdefender Antivirus Plus versions prior to 26.0.10.45, update to version 26.0.10.45 or later. For Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146, update to version 7.4.3.146 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-22-484
Found an issue in the description? Have something to add? Feel free to write us 👾