McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability
CVE-2021-23876

7.8HIGH

Key Information:

Vendor

Mcafee,llc

Status
Mcafee Total Protection (mtp)
Vendor
CVE Published:
10 February 2021

What is CVE-2021-23876?

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware.

Affected Version(s)

McAfee Total Protection (MTP) Windows < 16.0.30

References

http://service.mcafee.com/FAQDocument.aspx?&id=TS103114
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.