CVE-2021-47799
MEDIUMVisual Tools DVR VX16 <4.2.28 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47799. PoCs published by Andrea D\'Ubaldo.
AI-analyzed exploit summary This exploit abuses an unsafe Sudo configuration in Visual Tools DVR VX16 4.2.28 to perform a local privilege escalation by binding /bin/sh to /bin/mount and then executing it with sudo.
Description
Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges.
Exploits (1)
This exploit abuses an unsafe Sudo configuration in Visual Tools DVR VX16 4.2.28 to perform a local privilege escalation by binding /bin/sh to /bin/mount and then executing it with sudo.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N