High severity7.8NVD Advisory· Published Feb 23, 2021· Updated Jun 17, 2026
CVE-2021-27579
CVE-2021-27579
Description
Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings.
Affected products
3cpe:2.3:a:snowsoftware:snow_inventory_agent:*:*:*:*:*:windows:*:*+ 2 more
- cpe:2.3:a:snowsoftware:snow_inventory_agent:*:*:*:*:*:windows:*:*range: >=5.3.1,<=6.7.0
- (no CPE)
- (no CPE)range: <=6.7.0
Patches
Vulnerability mechanics
References
1- community.snowsoftware.com/s/feed/0D56900009cfHLDCA2nvdVendor Advisory
News mentions
0No linked articles in our index yet.