CVE-2021-23879

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileges are required to place the files in the required location.

CVSS v3 6.7 MEDIUM
CVSS v2.0 7.2 HIGH

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://kc.mcafee.com/corporate/index?page=content&id=SB10351

Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:endpoint_product_removal_tool:*:*:*:*:*:*:*:*

History

07 Nov 2023, 03:30

Type	Values Removed	Values Added
References	~~(CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10351 - Vendor Advisory~~	() https://kc.mcafee.com/corporate/index?page=content&id=SB10351 -

26 Apr 2022, 16:01

Type	Values Removed	Values Added
CWE	~~CWE-269~~	CWE-428

19 Mar 2021, 20:09

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 7.2 v3 : 6.7
CPE		cpe:2.3:a:mcafee:endpoint_product_removal_tool::::::::
References	~~(CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10351 -~~	(CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10351 - Vendor Advisory

15 Mar 2021, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2021-03-15 19:15

Updated : 2023-12-10 13:41

NVD link : CVE-2021-23879

Mitre link : CVE-2021-23879

CVE.ORG link : CVE-2021-23879

JSON object : View

Products Affected

mcafee

endpoint_product_removal_tool

CWE

CWE-428

Unquoted Search Path or Element

{"id": "CVE-2021-23879", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2021-03-15T19:15:13.323", "references": [{"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10351", "source": "trellixpsirt@trellix.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-428"}]}, {"type": "Secondary", "source": "trellixpsirt@trellix.com", "description": [{"lang": "en", "value": "CWE-428"}]}], "descriptions": [{"lang": "en", "value": "Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileges are required to place the files in the required location."}, {"lang": "es", "value": "Una vulnerabilidad de ruta de servicio no citada en la herramienta McAfee Endpoint Product Removal (EPR) versiones anteriores a 21.2, permite a administradores locales ejecutar c\u00f3digo arbitrario, con privilegios de nivel superior, por medio de una ejecuci\u00f3n desde una carpeta comprometida. La herramienta no aplic\u00f3 ni protegi\u00f3 la ruta de ejecuci\u00f3n. Son requeridos privilegios de administrador local para poner los archivos en la ubicaci\u00f3n requerida"}], "lastModified": "2023-11-07T03:30:56.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:endpoint_product_removal_tool:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1187BDD8-B299-4DAC-AE82-F6F520CCED16", "versionEndExcluding": "21.2"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}