CVE-2021-21911: advantech r-seenet Incorrect Default Permissions

Vulnerability summary

CVE-2021-21911 is a high (CVSS 8.8) Incorrect Default Permissions vulnerability in advantech r-seenet. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 24.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 22-12-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-276Incorrect Default PermissionsDuring installation, installed file permissions are set to allow anyone to modify those files.
• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.