CVE-2021-4480

Dräger Protector Software Local Privilege Escalation via Insecure File Permissions

8.3 High

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execute code with NT SYSTEM privileges.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Active

What an attacker can affect

Confidentiality: None
Integrity: High
Availability: High

Exploit likelihood

0.11%Up 0.1 points since Jun 3, 2026

What each source reports

CVE List Score used 8.3

Dräger Protector Software Local Privilege Escalation via Insecure File Permissions

Record: CVE-2021-4480
CVSS 4.0: 8.3 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
Weakness: CWE-732
Updated: 2026-11-02

EUVDEUVD-2021-34846 8.3

Record: EUVD-2021-34846
CVSS 4.0: 8.3 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w85v-g7rp-mcgm 8.3

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation...

Record: GHSA-w85v-g7rp-mcgm
CVSS 4.0: 8.3 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
Weakness: CWE-732
Updated: 2026-11-02

NVD 8.3

Record: CVE-2021-4480
CVSS 4.0: 8.3 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H
Weakness: CWE-732
Updated: 2026-11-02

Affected products

dräger protector software

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-4480 is a high vulnerability (CVSS 8.3) in Dräger Protector Software, published June 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.11%, the 1st percentile. No source names a fixed version.