PT-2026-45860 · Dräger · Protector

Mario Ceballos · CVE-2021-4480 · Published 2026-06-02 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dräger Protector Software versions prior to 6.4.2

Description Insecure file system permissions allow local attackers to execute arbitrary code with elevated privileges. This is achieved by replacing binaries or loaded modules on the host system to execute code with NT SYSTEM privileges, which is the highest level of privilege on a Windows system.

Recommendations Update to version 6.4.2 or later.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2021-4480

Affected Products

Protector

References · 7

• https://static.draeger.com/security/download/2021-267-01-Draeger-Protector-Software-vulnerabilities.pdf · Vendor Advisory
• https://static.draeger.com/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4480 · Security Note
• https://t.me/cveNotify/166023 · Telegram Post
• https://t.me/CVEtracker/55658 · Telegram Post
• https://t.me/cveNotify/165869 · Telegram Post
• https://vulncheck.com/advisories/dr-ger-protector-software-local-privilege-escalation-via-insecure-file-permissions · Note