CVE-2021-20100

EPSS 0.06%
Published 28.06.2021 11:15:07
Last modified 21.11.2024 05:45:55
Source vulnreport@tenable.com
Teams watchlist Login
Open Login

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Tenable ≫ Nessus Version < 8.2.5

Microsoft ≫ Windows Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.165

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

https://www.tenable.com/security/tns-2021-12

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-20100

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-20100

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-20100

EUVD