High severity · published Jun 2, 2026
CVE-2021-4480
Dräger Protector Software Local Privilege Escalation via Insecure File Permissions
8.2
CVSS
0.1%
EPSS
No
On KEV
Description
Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Protector Software · Dräger
before 6.4.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-4480
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-4480
static.draeger.com
https://static.draeger.com/security/download/2021-267-01-Draeger-Protector-Software-vulnerabilities.pdf
www.vulncheck.com
https://www.vulncheck.com/advisories/dr-ger-protector-software-local-privilege-escalation-via-insecure-file-permissions
More from Protector Software
8.2
CVE-2021-4481
Dräger Protector Software Local Privilege Escalation via Insecure File Permissions