Vulnerability in Dräger Protector Software
CVE-2021-4481
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
EPSS: 0.001 (1.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H.
Affected products
- Dräger Protector Software — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (vendor-advisory)
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (vendor-advisory)
- disclosure@vulncheck.com (vendor-advisory)
Frequently asked questions
- What is CVE-2021-4481?
- CVE-2021-4481 is a high-severity vulnerability in Dräger Protector Software, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.2/10. Published 2026-06-02.
- How severe is CVE-2021-4481?
- High severity. CVSS v3 base score is 8.2 out of 10.