CVE-2021-34546

MEDIUM

NetSetMan < 5.0 - Unauthenticated Privilege Escalation via Save Log Feature

Title source: llm
STIX 2.1

Description

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to file" feature. To accomplish this, the attacker can navigate to cmd.exe.

References (5)

Core 5
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.secuvera.de/advisories/secuvera-SA-2021-01.txt
Third Party Advisory x_refsource_misc
https://www.secuvera.de
Vendor Advisory x_refsource_misc
https://www.netsetman.com
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2021/Jun/17
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/163097/NetSetManPro-4.7.2-Privilege-Escalation.html

Scores

CVSS v3 6.8
EPSS 0.0069
EPSS Percentile 48.2%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (1)
netsetman/netsetman < 5.0
Published Jun 10, 2021
Tracked Since Feb 18, 2026