CVE-2024-6871

Summary

CVE-2024-6871 is a local privilege escalation vulnerability affecting G DATA Total Security. This issue enables attackers to escalate privileges on impacted systems by exploiting incorrect permissions assigned to folders related to autostart tasks. To exploit this vulnerability, an attacker must initially gain the ability to execute low-privileged code. Successful exploitation allows the attacker to execute arbitrary code with SYSTEM-level privileges. This vulnerability, originally discovered as ZDI-CAN-22629, poses a significant risk to systems running G DATA Total Security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.