CVE-2021-1240

CVE-2021-1240 is a local privilege escalation vulnerability in Cisco Proximity Desktop for Windows, stemming from incorrect handling of DLL loading paths. An authenticated, local attacker can exploit this by placing a malicious DLL in a specific directory, leading to arbitrary code execution with elevated privileges when the application launches. With a CVSS score of 7.3 (HIGH), it requires local access and user interaction (launching the application) for exploitation, but can result in full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.