PT-2023-1884 · Mcafee · Mcafee Total Protection

Publicado 2023-03-13 · Atualizado 2025-03-03 · CVE-2023-24579

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.51

Description The issue is related to insecure privilege management in McAfee Total Protection, allowing attackers to trick victims into uninstalling the application via the command prompt.

Recommendations For versions prior to 16.0.51, update to version 16.0.51 or later to resolve the issue.

Correção

Improper Privilege Management

RCE

Improper Resource Release

Enumeração de Fraquezas

CWE-269

CWE-20

CWE-404

Identificadores relacionados

BDU:2023-01485

CVE-2023-24579

Produtos afetados

Mcafee Total Protection

Referências · 12

• https://osv.dev/vulnerability/CVE-2023-24579 · Aviso do Fabricante
• https://t.me/cvenotify/46673 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-01485 · Nota de Segurança
• https://mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html · Aviso do Fabricante
• https://t.me/cibsecurity/59889 · Publicação no Telegram
• https://mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view · Aviso do Fabricante
• https://mcafee.com/support/?locale=en-US&articleId=TS103397&page=shell&shell=article-view · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-24579 · Nota de Segurança
• https://t.me/cvenotify/113230 · Publicação no Telegram
• https://vuldb.com/ru/?id.222899 · Nota
• https://mcafee.com/support/?locale=en-US&articleId=TS103397&page=shell&shell=article-view · Nota
• https://mcafee.com/support/?articleId=TS103397&page=shell&shell=article-view · Nota