Command injection

2021-06-2910:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.1%

JSON

A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality ‘execute reaction’.

CPENameOperatorVersion
mvision_edrlt3.4.0

CPE	Name	Operator	Version
	mvision_edr	lt	3.4.0

References

kc.mcafee.com/corporate/index?page=content&id=SB10342