The vulnerability in Dräger Protector Software stems from insecure file system permissions that allow a local attacker to replace binaries or loaded modules. By doing so, the attacker can execute arbitrary code with NT SYSTEM privileges. This flaw results in local privilege escalation, permitting full control over the affected host.

Dräger Protector Software versions earlier than 6.4.2 are affected. The vulnerability targets the file permissions used by the application and its supporting modules on hosts running the software.

The CVSS score of 8.3 indicates a high severity flaw. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is local; an attacker with access to the host filesystem can modify protected files to achieve system-level execution. Because the exploit requires no remote interaction, the probability of exploitation depends on internal threat presence, but the damage potential is substantial.