DLL Replacement Vulnerability in Stormshield Endpoint Security
CVE-2021-35957

6.7MEDIUM

Key Information:

Vendor

Stormshield

Status
Endpoint Security
Vendor
CVE Published:
13 July 2021

What is CVE-2021-35957?

Stormshield Endpoint Security versions 2.0.0 to 2.0.2 are vulnerable to an exploit where local administrators can replace the Visual C++ runtime DLLs located in the %WINDIR%\system32 directory. This breach allows attackers to substitute legitimate DLL files with malicious variants, compromising the security and integrity of the affected systems. Regular updates and strict access controls are advised to mitigate the risk associated with this vulnerability.

References

https://advisories.stormshield.eu
x_refsource_MISC
https://advisories.stormshield.eu/2021-045/
x_refsource_MISC

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.