CVE-2021-23879

Unquoted service path vulnerability in McAfee Endpoint Product Removal EPR Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileg...

Vulnerability allowed hackers to tamper medication in infusion pump

By Deeba Ahmed Braun Patched Faulty IV Pump After McAfee Discovered Vulnerability Allowing Medication Tampering. This is a post from HackRead.com Read the original post: Vulnerability allowed hackers to tamper medication in infusion pump...

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun's Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered...

Vulnerabilities in Globally Used B. Braun Infusion Pump

ARCHIVED STORY McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump Douglas McKee and Philippe Laulheret · Aug 24, 2021 Overview As part of our continued goal to provide safer products for enterprises and consumers, we at McAfee Advanced Threat Research ATR...

Vulnerabilities in Globally Used B. Braun Infusion Pump

ARCHIVED STORY McAfee Enterprise ATR Uncovers Vulnerabilities in Globally Used B. Braun Infusion Pump Douglas McKee and Philippe Laulheret · Aug 24, 2021 Overview As part of our continued goal to provide safer products for enterprises and consumers, we at McAfee Advanced Threat Research ATR...

See Ya Sharp: A Loaders Tale | McAfee Blogs

ARCHIVED STORY See Ya Sharp: A Loader’s Tale Max Kersten · Aug 04, 2021 Introduction The DotNet based CyaX-Sharp loader, also known as ReZer0, is known to spread commodity malware, such as AgentTesla. In recent years, this loader has been referenced numerous times, as it was used in campaigns...

No More Ransom Saves Victims Nearly €1 billion Over 5 Years

To date, the No More Ransom repository of ransomware decryptors has helped more than 6 million victims recover their files, keeping nearly a billion euros out of the hands of cybercriminals, according to a Monday release. Launched five years ago, No More Ransom is maintained via cooperation betwe...

Decrypter FOMO No Mo’: Five Years of the No More Ransom Project

The amazing No More Ransom Project celebrates its fifth anniversary today and so we just wanted to take a moment to talk about what it has accomplished and why you should tell all your friends about it. The name pretty much says it all — No More Ransom aims to help organizations avoid having to p...

McAfee Agent 5.5.x prior to 5.5.4 / 5.6.x prior to 5.6.4 DLL Search Order Hijacking (SB10320)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.5.x prior to 5.5.4 / 5.6.x prior to 5.6.4. It is, therefore, affected by a DLL search order hijacking vulnerability. it allows attackers with local access to execute arbitrary code via...

McAfee Host Intrusion Prevention Services < 8.0.0.5257 DLL Search Order Hijacking (SB10320)

The version of McAfee Host Intrusion Prevention Services HIPS is prior to 8.0.0.5257. It is, therefore, affected by a DLL search order hijacking vulnerability. It allows attackers with local access to execute arbitrary code via execution from a compromised folder. %NASLMINLEVEL 70300 C Tenable...

McAfee MVISION EDR Command Injection Vulnerability

Mcafee McAfee MVISION EDR is an EDR product from Mcafee, Inc. that collects endpoint action logs and analyzes them with AI to detect malicious actions and take countermeasures. A command injection vulnerability exists in MVISION EDR that allows an authenticated MVEDR administrator to trigger an E...

Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee

Hello, today I want to experiment with a new format. I will be reading last weeks news from my @avleonovnews channel, which I found the most interesting. I do this mostly for myself, but if you like it too, then that would be great. Please subscribe to my YouTube channel and my Telegram...

Antivirus Pioneer John McAfee Found Dead in Spanish Jail

Controversial mogul and antivirus pioneer John McAfee on Wednesday died by suicide in a jail cell in Barcelona, hours after reports that he would be extradited to face federal charges in the U.S. McAfee was 75. He is said to have died by hanging "as his nine months in prison brought him to...

John McAfee Dies in Spanish Prison After Extradition Order

The antivirus pioneer and alleged cryptocurrency scammer was 75 years old...

John McAfee has Died in Spanish Prison, Reports

By Waqas Reportedly, John McAfee has died of suicide hours after the Spanish High Court authorized his extradition to the United States. According to local Spanish media, Mr. John McAfee, the founder of antivirus company McAfee has died in a prison near Barcelona, Spain. 75-year-old McAfee...

McAfee Active Response 安全漏洞

Mcafee McAfee Active Response MAR is an endpoint detection and response tool for security threats from McAfee USA. The product supports features such as quick access to threat data, threat alerts, and centralized management. A security vulnerability exists in McAfee Active Response that originate...

The vulnerability of the McAfee Total Protection download client allows a hacker to execute arbitrary code.

The vulnerability of the McAfee Total Protection antivirus protection software’s download process is related to the use of an unreliable search path during the download of dynamic DLL libraries. Exploiting this vulnerability allows an attacker to execute arbitrary code...

McAfee MVISION EDR 操作系统操作系统命令注入漏洞

Mcafee McAfee MVISION EDR is an EDR product from Mcafee, Inc. that collects endpoint action logs and analyzes them with AI to detect malicious actions and take countermeasures. A command injection vulnerability exists in MVISION EDR that allows an authenticated MVEDR administrator to trigger an E...

The vulnerability of the McAfee Agent antivirus software, related to errors in processing temporary files, allows a hacker to increase their privileges.

The vulnerability of the McAfee Agent antivirus software is related to errors in the processing of temporary files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the client-side loading mechanism of the McAfee TechCheck performance scanning system allows a perpetrator to execute arbitrary code.

The vulnerability of the PC performance scanning system’s McAfee TechCheck lies in the loading of a non-existent dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...