Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08725
HistoryJan 28, 2022 - 12:00 a.m.

Mcafee Agent has an unspecified vulnerability (CNVD-2022-08725)

2022-01-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.0004 Low

EPSS

Percentile

12.6%

McAfee McAfee Agent (MA) is a client component from Mcafee that provides secure communication between ePolicy Orchestrator (antivirus management platform) and the managed products. Agent uses openssl.cnf to specify the OPENSSLDIR variable as a subdirectory in the installation directory during the build process. A low-privilege attacker could exploit the vulnerability to create a subdirectory and execute arbitrary code with SYSTEM privileges by creating the appropriate path to a specifically created malicious openssl.cnf file.

CPENameOperatorVersion
mcafee mcafee agent for windowslt5.7.5

0.0004 Low

EPSS

Percentile

12.6%