High severity · published Nov 10, 2021
CVE-2021-31853
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption (MDE) prior to 7.3.0 HF2 (7.3.0.183) allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Drive Encryption · Mcafee
7.2.0 through 7.2.10; 7.3.0; 7.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-31853
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-31853
Broken Link
https://kc.mcafee.com/corporate/index?page=content&id=SB10374
More from Drive Encryption
7.8
CVE-2021-23893
Privilege Escalation vulnerability in a Windows system driver of McAfee Drive Encryption (DE) prior to 7.3.0 could allow a local non-admin user to gain elevated system privileges…
6.6
CVE-2018-6686
Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via…