CVE-2021-31838

MVISION EDR (MVEDR) before 3.4.0 has a command injection vulnerability that allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands via PowerShell using the EDR feature “Execute Reaction.” The root cause/impact is described as enabling arbitrary command...