Login Request a demo
High severity · published Aug 18, 2022
CVE-2022-37025
An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. This could result in the user gaining elevated permissions and being able to execute arbitrary code due to lack of an integrity check of the configuration file.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Security Scan Plus · Mcafee
before 4.1.262.1 · source: NVD
Affected product
SS
Security Scan Plus
Mcafee
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37025
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37025
Not Applicable
https://attack.mitre.org/techniques/T1218/
Product
https://www.mcafee.com/en-us/antivirus/mcafee-security-scan-plus.html
Patch
https://www.mcafee.com/support/?articleId=TS103335&page=shell&shell=article-view
More from Security Scan Plus
9.8
CVE-2017-3897
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions…
8.8
CVE-2016-8008
Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via…
7.8
CVE-2016-8026
Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain elevated privileges via…
7.0
CVE-2015-8993
Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting…
7.0
CVE-2015-8992
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing…