Vulnerability · Published Jan 19, 2022 · Assigned by trellix
CVE-2022-0166Privilege escalation vulnerability in McAfee Agent
High 7.8
In plain English
A high-severity security flaw in McAfee Agent for Windows from McAfee,LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)2.9%top 12.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary code with SYSTEM privileges by creating the appropriate pathway to the specifically created malicious openssl.cnf file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| McAfee,LLC | McAfee Agent for Windows | unspecified – before 5.7.5 |
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10378 x_refsource_CONFIRM
- VU#287178 third-party-advisory, x_refsource_CERT-VN