CVE-2021-31854
Last modified
CVE-2021-31854 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the System Tree. EPSS estimates a 1.02% chance of exploitation in the next 30 days.
Description
A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the System Tree. An attacker may exploit the vulnerability to obtain a reverse shell which can lead to privilege escalation to obtain root privileges.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Agent | < 5.7.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-31854?
How severe is CVE-2021-31854?
How do I fix CVE-2021-31854?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-31849SQL injection vulnerability in McAfee Data Loss Prevention (…7.2
- CVE-2021-3185A flaw was found in the gstreamer h264 component of gst-plug…9.8
- CVE-2021-31850A denial-of-service vulnerability in Database Security (DBS)…6.1
- CVE-2021-31851A Reflected Cross-Site Scripting vulnerability in McAfee Pol…6.1
- CVE-2021-31852A Reflected Cross-Site Scripting vulnerability in McAfee Pol…6.1
- CVE-2021-31853DLL Search Order Hijacking Vulnerability in McAfee Drive Enc…7.8
- CVE-2021-31855KDE Messagelib through 5.17.0 reveals cleartext of encrypted…6.5
- CVE-2021-31856A SQL Injection vulnerability in the REST API in Layer5 Mesh…9.8
- CVE-2021-31857In Zoho ManageEngine Password Manager Pro before 11.1 build …5.9
- CVE-2021-31858DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-S…5.4
- CVE-2021-31859Incorrect privileges in the MU55 FlexiSpooler service in YSo…7.8
- CVE-2021-3186A Stored Cross-site scripting (XSS) vulnerability in /main.h…5.4
Are you affected by CVE-2021-31854?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST