CVE-2021-31841: fallo de gravedad alta en McAfee Agent for Windows
DLL side loading vulnerability in MA for Windows
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.2epss 0.2%
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Productos afectados
McAfee,LLC · McAfee Agent for WindowsCVEs relacionadas — McAfee Agent for Windows
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-0166HIGHPrivilege escalation vulnerability in McAfee AgentEPSS 2.9%CVE-2021-31854HIGHCode injection vulnerability in McAfee AgentEPSS 1.0%CVE-2021-31847HIGHImproper privilege management in repair process of MA for WindowsEPSS 0.4%CVE-2021-31840HIGHDLL preload vulnerability in McAfee Agent for WindowsEPSS 0.3%CVE-2022-1256HIGHImproper Privilege Management in McAfee Agent for WindowsEPSS 0.3%CVE-2021-31836MEDIUMImproper Privilege Management in MA for WindowsEPSS 0.2%