CVE-2021-3394

HIGH

Millewin 13.39.028 13.39.28.3342 13.39.146.1 - Local Privilege Escalation via Insecure Folder Permissions

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-3394. PoCs published by Andrea Intilangelo.

AI-analyzed exploit summary This is a detailed technical writeup describing a local privilege escalation vulnerability in Millewin due to insecure folder permissions and unquoted service paths. The analysis includes affected services, registry keys, and folder permissions that allow low-privileged users to replace executables and gain SYSTEM privileges.

Description

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Andrea Intilangelo · textlocalwindows
https://www.exploit-db.com/exploits/49530

This is a detailed technical writeup describing a local privilege escalation vulnerability in Millewin due to insecure folder permissions and unquoted service paths. The analysis includes affected services, registry keys, and folder permissions that allow low-privileged users to replace executables and gain SYSTEM privileges.

Classification
Writeup 95%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Millewin versions 13.39.028, 13.39.28.3342, 13.39.146.1
Auth required
Prerequisites: Local access to the system · Millewin software installed with vulnerable permissions
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.exploit-db.com/exploits/49530

Scores

CVSS v3 8.8
EPSS 0.0579
EPSS Percentile 92.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-276
Status published
Products (3)
millewin/millewin 13.39.028
millewin/millewin 13.39.28.3342
millewin/millewin 13.39.146.1
Published Feb 09, 2021
Tracked Since Feb 18, 2026