Lucene search

MitreCVE-2021-45338

HistoryDec 27, 2021 - 2:15 p.m.

CVE-2021-45338

2021-12-2714:15:08

mitre

web.nvd.nist.gov

cve-2021-45338

avast antivirus

privilege escalation

vulnerability

nvd

security advisory

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

9.8%

JSON

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.

Affected configurations

Nvd

Node

avastantivirusRange<20.4

VendorProductVersionCPE
avastantivirus*cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
avast	antivirus	*	cpe:2.3:a:avast:antivirus::::::::

References

github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.1

github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.2

github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.3

www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

9.8%

JSON

Related for CVE-2021-45338