CVE-2024-49592

Katalog CVE

CVSS 6.7 · Medium EPSS 0,20%

Kerentanan Uncontrolled Search Path Element. Skor CVSS 3.1 6.7 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only affects execution of this installer, and does not leave McAfee Total Protection in a vulnerable state after installation is completed. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD

15 November 2024

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

6.7 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.mcafee.com/support/s/article/000002516?language=en_US