CVE-2022-43751

HIGH

7.8

Description

McAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element vulnerability due to the use of a variable pointing to a subdirectory that may be controllable by an unprivileged user. This may have allowed the unprivileged user to execute arbitrary code with system privileges.

Details CVE

Score CVSS v3.17.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie11/23/2022

Derniere modification4/29/2025

Sourcenvd

Observations honeypot0

Produits affectes

mcafee:total_protection

Faiblesses (CWE)

CWE-427CWE-427

References

https://mcafee.com(cve@mitre.org)

https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-view(cve@mitre.org)

https://mcafee.com(af854a3a-2127-422b-91ae-364da2661108)

https://www.mcafee.com/support/?articleId=TS103348&page=shell&shell=article-view(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.