McAfee Safe Connect VPN Unquoted Service Path

Exploit Title: McAfee® Safe Connect VPN - Unquoted Service Path Elevation Of Privilege Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.mcafee.com/ Software Link: https://www.mcafee.com/en-us/vpn/mcafee-safe-connect.html Version: 2.13 Tested: Windows 10 x64 Contact:...

McAfee(R) Safe Connect VPN - Unquoted Service Path Elevation Of Privilege

Exploit Title: McAfee® Safe Connect VPN - Unquoted Service Path Elevation Of Privilege Date: 09/03/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.mcafee.com/ Software Link: https://www.mcafee.com/en-us/vpn/mcafee-safe-connect.html Version: 2.13 Tested: Windows 10 x64 Contact:...

Mcafee WebAdvisor 访问控制错误漏洞

McAfee WebAdvisor, an organization of Mcafee, Inc. that evaluates Web site security, also refers to the services it provides. attackers can use this vulnerability to obtain detailed information about McAfee WebAdvisor settings and user systems...

McAfee Total Protection 安全漏洞

McAfee McAfee Total Protection MTP is a suite of antivirus software from Mcafee, Inc. McAfee Total Protection for Windows 16.0.43 previously contained a competitive condition vulnerability that could be exploited by a local attacker to gain elevated privileges and execute arbitrary files Delete...

McAfee Safe Connect VPN - Unquoted Service Path Elevation Of Privilege Vulnerability

Exploit Title: McAfee® Safe Connect VPN - Unquoted Service Path Elevation Of Privilege Exploit Author: Saud Alenazi Vendor Homepage: https://www.mcafee.com/ Software Link: https://www.mcafee.com/en-us/vpn/mcafee-safe-connect.html Version: 2.13 Tested: Windows 10 x64 Contact:...

Validate the Efficacy of your Endpoint Security Controls Continuously with Breach and Attack Simulations

Validate the efficacy of your Endpoint Security controls continuously with Breach and Attack Simulations By Nicolas Stricher, Trellix XDR solution Architect, EMEA and Doron RosenbergTrellix Senior Sales Engineer, Israel · March 4, 2022 Efficacy of Trellix Endpoint Security At Trellix we are proud...

McAfee Data Loss Prevention ePO extension Blind SQLi (SB10376)

The remote host is running a version of McAfee ePolicy Orchestrator that is affected by a blind SQL injection vulnerability that allows a remote authenticated attacker to inject unfiltered SQL into the DLP part of the ePO database. This could lead to remote code execution on the ePO server with...

The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software allows a malicious actor to execute arbitrary commands.

The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software is related to inadequate code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

PT-2022-2272 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.43 Description: A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows, allowing a local user to gain privilege elevation and perform an arbitrary...

Mcafee Agent has an unspecified vulnerability (CNVD-2022-08725)

McAfee McAfee Agent MA is a client component from Mcafee that provides secure communication between ePolicy Orchestrator antivirus management platform and the managed products. Agent uses openssl.cnf to specify the OPENSSLDIR variable as a subdirectory in the installation directory during the bui...

McAfee Agent Command Injection Vulnerability

The McAfee McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator the antivirus management platform and managed products. A security vulnerability exists in the McAfee Agent that originates from allowing a local user to...

McAfee Agent < 5.7.5 Multiple Vulnerabilities (SB10378)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is prior to 5.7.5. It is, therefore, affected by the following vulnerabilities: - A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject...

The vulnerability of the McAfee Agent antivirus software, related to privilege management errors, allows a hacker to elevate their privileges.

The vulnerability of the McAfee Agent antivirus software is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges using a specially created openssl.cnf file...

Prime Minister’s Office Compromised: Details of Recent Espionage Campaign

Prime Minister’s Office Compromised: Details of Recent Espionage Campaign By Marc Elias · January 25, 2022 A special thanks to Christiaan Beek, Alexandre Mundo, Leandro Velasco and Max Kersten for malware analysis and support during this investigation. Executive Summary Our Advanced Threat Resear...

McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges

McAfee has patched two high-severity vulnerabilities in a component of its McAfee Enterprise product that attackers can use to escalate privileges, including up to SYSTEM. According to McAfee’s bulletin, the bugs are in versions prior to 5.7.5 of McAfee Agent, which is used in McAfee Endpoint...

McAfee Releases Security Update for McAfee Agent for Windows 

McAfee has released McAfee Agent for Windows version 5.7.5, which addresses vulnerabilities CVE-2021-31854 and CVE-2022-0166. An attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review McAfee Security Bulletin SB10378...

Vulnerabilities fixed in McAfee Agent

Vulnerabilities have been fixed in McAfee Agent. The vulnerabilities potentially allow a malicious party to obtain elevated privileges to obtain or execute arbitrary code with the privileges of the application. McAfee has made updates available to address the vulnerabilities. fixes. For more...

McAfee Agent for Windows is vulnerable to privilege escalation due to OPENSSLDIR location

Overview McAfee Agent contains a privilege escalation vulnerability due to the use of an OPENSSLDIR variable that specifies a location where an unprivileged Windows user may be able to place files. Description CVE-2022-0166 McAfee Agent, which comes with various McAfee products such as McAfee...

CVE-2021-31854

A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...

CVE-2021-31854

A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...