Security Advisory

CVE-2021-26624

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-01 22:17:42
Last updated 2024-08-03 20:26:25
Assigner krcert
CVSS score 7.8
State PUBLISHED

Description

An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.