G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of autostart tasks. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22629.
History

Tue, 10 Dec 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Tue, 26 Nov 2024 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Gdata-software
Gdata-software total Security
CPEs cpe:2.3:a:gdata-software:total_security:25.5.15.21:*:*:*:*:*:*:*
Vendors & Products Gdata-software
Gdata-software total Security
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 22 Nov 2024 21:45:00 +0000

Type Values Removed Values Added
Description G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of autostart tasks. The issue results from incorrect permissions set on folders. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-22629.
Title G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Weaknesses CWE-732
References
Metrics cvssV3_0

{'score': 7, 'vector': 'CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: zdi

Published: 2024-11-22T21:30:23.472Z

Updated: 2024-11-26T15:43:45.782Z

Reserved: 2024-07-17T23:54:26.449Z

Link: CVE-2024-6871

cve-icon Vulnrichment

Updated: 2024-11-26T15:43:37.093Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-22T22:15:15.173

Modified: 2024-12-10T16:49:59.447

Link: CVE-2024-6871

cve-icon Redhat

No data.