CVE-2021-23876CWE-269

McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability

High · published February 10, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00430 · 36.2th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-02-10T10:25Z
EPSS history
Timeline
  • 10 FEB 10:25Z
    McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability
    cvelistv5