High severity · published Jun 20, 2022
CVE-2022-1824
An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a…
8.2
CVSS
0.4%
EPSS
No
On KEV
Description
An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary code as there were insufficient checks on the executable being signed by McAfee.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Consumer Product Removal Tool · Mcafee
before 10.4.128 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-1824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-1824
Vendor Advisory
https://service.mcafee.com/?articleId=TS103318&page=shell&shell=article-view
More from Consumer Product Removal Tool
7.8
CVE-2022-1823
Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local user to modify a configuration file and perform a…