CVE-2021-26624 — eScan Anti-Virus Local privilege escalation Vulnerability

CVE-2021-26624

eScan Anti-Virus Local privilege escalation Vulnerability PUBLISHED

Description (CNA)

An local privilege escalation vulnerability due to a "runasroot" command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to "runasroot" command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values.

Affected (CNA)

Vendor / product	Versions
MicroWorld Technologies Inc. / eScan Anti-Virus for Linux	affected unspecified through 7.0.31

CWE

CWE-20

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66596

ADP enrichment

CVE

No English description supplied.

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66596