PT-2021-19543 · Mcafee · Mcafee Agent For Windows

Published 2021-09-22 · Updated 2023-11-15 · CVE-2021-31841

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Agent for Windows versions prior to 5.7.4

Description A DLL sideloading issue could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.

Recommendations For versions prior to 5.7.4, update to version 5.7.4 or later to resolve the issue. As a temporary workaround, consider restricting the ability to load unsigned DLLs in specific locations to minimize the risk of exploitation.

Fix

Improper Verification of Cryptographic Signature

Untrusted Search Path

Weakness Enumeration

CWE-347

CWE-426

Related Identifiers

CVE-2021-31841

Affected Products

Mcafee Agent For Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-31841 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31841 · Vendor Advisory
• https://t.me/cibsecurity/29234 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10369 · Note