Vulnerability · Published Jun 29, 2021 · Assigned by trellix
CVE-2021-31838Command injection through environment variable in MVISION EDR
High 8.4
In plain English
A high-severity OS command injection in MVISION EDR from McAfee,LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)2.1%top 18.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| McAfee,LLC | MVISION EDR | unspecified – before 3.4.0 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10342 x_refsource_CONFIRM