CVE-2021-23893
Assigner: trellix
Published: 2021-10-01T09:25:11
State: PUBLISHED
affected: product: McAfee Drive Encryption (MDE)
vendor: McAfee,LLC
versions: lessThan: 7.3.0 HF1
status: affected
version: unspecified
versionType: custom
credits: value: Balazs Bucsay (@xoreipeip), Principal Security Consultant from NCC Group
descriptions: value: Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges via exploiting an unutilized memory buffer.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-269
description: CWE-269: Improper Privilege Management
type: CWE
source: discovery: EXTERNAL
title: Privilege Escalation vulnerability in McAfee Drive Encryption (MDE)
x_generator: engine: Vulnogram 0.0.9