VULNERABILITY INTELLIGENCE

CVE-2021-43986

CVSS score6 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2022-04-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H

Description

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-284
  • nvd@nist.gov: CWE-276

Primary references