Skip to main content

DNS CVE-2021-47799

MEDIUM
Incorrect Privilege Assignment (CWE-266)
2026-01-15 disclosure@vulncheck.com
6.2
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.2 MEDIUM
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
PoC Detected
Jan 16, 2026 - 15:55 vuln.today
Public exploit code
CVE Published
Jan 15, 2026 - 16:16 nvd
MEDIUM 6.2

DescriptionCVE.org

Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges.

AnalysisAI

its Sudo configuration contains a vulnerability that allows attackers to gain root access (CVSS 6.2).

Technical ContextAI

affects its Sudo configuration. Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges.

Affected ProductsAI

Product: its Sudo configuration.

RemediationAI

Monitor vendor advisories for a patch.

Share

CVE-2021-47799 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy