What is CVE-2021-31838?

CVE-2021-31838 is a high-severity vulnerability in Mcafee Mvision Edr, classified under OS Command Injection. CVSS score: 8.4/10. Published 2021-06-29.

How severe is CVE-2021-31838?

High severity. CVSS v3 base score is 8.4 out of 10.

RCE in Mcafee Mvision Edr

CVE-2021-31838

A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.021 (79.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Mcafee Mvision_edr
Mcafee,llc Mvision Edr — versions unspecified

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2021-31838?: CVE-2021-31838 is a high-severity vulnerability in Mcafee Mvision Edr, classified under OS Command Injection. CVSS score: 8.4/10. Published 2021-06-29.
How severe is CVE-2021-31838?: High severity. CVSS v3 base score is 8.4 out of 10.