Uninstallation Vulnerability in McAfee Total Protection
CVE-2023-24579

5.5MEDIUM

Key Information:

Vendor

Mcafee
Status
Total Protection
Vendor
CVE Published:
13 March 2023

What is CVE-2023-24579?

A vulnerability in McAfee Total Protection allows attackers to exploit the application by tricking users into uninstalling the program through the command prompt. This manipulation can compromise the security of users' systems, potentially leading to unauthorized access and exposing sensitive data. It is crucial for users to be aware of potential social engineering tactics that could exploit this flaw and to ensure their software is updated to the latest version to mitigate risks.

References

https://www.mcafee.com/en-us/consumer-corporate/mcafee-la...
https://www.mcafee.com/support/?articleId=TS103397&page=s...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-24579 : Uninstallation Vulnerability in McAfee Total Protection