Vulnerability in Dräger Protector Software
CVE-2021-4481
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H.
EPSS exploit prediction
EPSS: 0.001 (1.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 1.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Dräger Protector Software — versions 0
Weakness classification (CWE)
References
- static.draeger.com/security (vendor-advisory)
- www.vulncheck.com/advisories/dr-ger-protector-software-local-privilege-escalati… (third-party-advisory)
- static.draeger.com/security/download/PSA-21-347-1-SCG-Security-Advisory.pdf (vendor-advisory)
- static.draeger.com/security/download/2021-267-01-Draeger-Protector-Software-vul… (vendor-advisory)
Frequently asked questions
- What is CVE-2021-4481?
- CVE-2021-4481 is a high-severity vulnerability in Dräger Protector Software, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.2/10. Published 2026-06-02.
- How severe is CVE-2021-4481?
- High severity. CVSS v3 base score is 8.2 out of 10.