CVE-2021-4480
Dräger Protector Software Local Privilege Escalation via Insecure File Permissions
- State
- Published
- Severity
- 8.3 High
- Published
- Jun 2, 2026
- Updated
- Jun 3, 2026
- Reserved
- Jun 2, 2026
Description
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.3 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H | VulnCheck |
| 3.1 | 8.2 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H | VulnCheck |
Weaknesses
- CWE-732 Incorrect Permission Assignment for Critical Resource
Affected Products
| Product | Versions |
|---|---|
Protector SoftwareDräger |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.