title: Software Updater of Avira Security for Windows vulnerable to Privilege Escalation
description: A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.
problem types: Privilege Escalation
affected:
{
vendor: Nortonlifelock
product: "Avira Security" – for Windows
versions:
version: all, status: affected, lessThan: 1.1.71.30554, versionType: custom
platforms: Windows
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
]