PT-2021-5328 · Mcafee · Mcafee Agent For Windows

Published 2021-06-08 · Updated 2021-06-22 · CVE-2021-31840

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Agent for Windows versions prior to 5.7.3

Description A vulnerability in the preloading mechanism of specific dynamic link libraries could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. The attacker would need to have valid credentials on the Windows system to exploit this issue, which could result in the user gaining elevated permissions and being able to execute arbitrary code.

Recommendations For versions prior to 5.7.3, update to version 5.7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive system areas to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2021-06156

CVE-2021-31840

Affected Products

Mcafee Agent For Windows

References · 5

• https://osv.dev/vulnerability/CVE-2021-31840 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31840 · Security Note
• https://bdu.fstec.ru/vul/2021-06156 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10362 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10362 · Note