CVE-2022-0129
High
Description
Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library (DLL) gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process was run from.
SeverityHigh
CVSS7.4
Exploit probability—
ProductMcafee Techcheck
PublishedJan 11, 2022
First seenJan 11, 2022
Weakness typeCWE-427CWE-427
How to fix
Update
- mcafee techcheck4.0.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee techcheck | v < 4.0.0.2 | 4.0.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.