CVE-2021-38085

Katalog CVE

CVSS 7.8 · High EPSS 0,98%

Kerentanan Incorrect Permission Assignment for Critical Resource pada canon pixma tr150 firmware. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This occurs because the driver drops a world-writable DLL into a CanonBJ %PROGRAMDATA% location that gets loaded by printisolationhost (a system process).

Rincian

Terbit di NVD

11 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,98% peluang dieksploitasi; lebih tinggi dari 61,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/163795/Canon-TR150-Driver-3.71.2.10-Privilege-Escalation.html exploit · advisory pihak ketiga · vdb entry
• https://defcon.org/html/defcon-29/dc-29-speakers.html#baines advisory pihak ketiga
• https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_03.txt advisory pihak ketiga
• https://www.youtube.com/watch?v=vdesswZYz-8 exploit · advisory pihak ketiga