Local Privilege Escalation in Dräger Protector Software
CVE-2021-4480

8.3HIGH

Key Information:

Vendor

Dräger

Status
Protector Software
Vendor
CVE Published:
2 June 2026

What is CVE-2021-4480?

Dräger Protector Software versions preceding 6.4.2 are susceptible to a local privilege escalation vulnerability caused by improper file system permissions. This flaw permits local attackers to execute arbitrary code with elevated privileges, potentially enabling the replacement of binaries or loaded modules on the host system and executing code with NT SYSTEM privileges. It is essential for users of affected versions to apply the necessary updates to mitigate this risk.

Affected Version(s)

Protector Software 0 < 6.4.2

References

https://static.draeger.com/security
vendor-advisory
https://www.vulncheck.com/advisories/dr-ger-protector-sof...
third-party-advisory

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mario Ceballos
.