CVE-2022-1823
High
Description
Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code, through not correctly checking the integrity of the configuration file.
SeverityHigh
CVSS7.9
Exploit probability—
ProductMcafee Consumer Product Removal Tool
PublishedJun 20, 2022
First seenJun 20, 2022
Weakness typeCWE-269Improper privilege management
How to fix
Update
- mcafee consumer_product_removal_tool10.4.128 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee consumer_product_removal_tool | v < 10.4.128 | 10.4.128 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.