CVE-2021-31838

A command injection vulnerability in MVISION EDR MVEDR prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'...

CVE-2021-31838

MVISION EDR (MVEDR) before 3.4.0 has a command injection vulnerability that allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands via PowerShell using the EDR feature “Execute Reaction.” The root cause/impact is described as enabling arbitrary command...

CVE-2021-31838 Command injection through environment variable in MVISION EDR

A command injection vulnerability in MVISION EDR MVEDR prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'...