CVE-2024-30377

Summary

CVE-2024-30377 is a local privilege escalation vulnerability affecting G DATA Total Security's AntiVirus Scan Server. An attacker must initially gain the ability to execute low-privileged code on the target system to exploit this issue. The flaw enables an attacker to create a symbolic link, which they can abuse to delete arbitrary files. By leveraging this vulnerability, an attacker can escalate privileges and execute arbitrary code with SYSTEM level access. This vulnerability, originally identified as ZDI-CAN-23381, poses a significant risk to systems running G DATA Total Security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.