Back to Database
Status published
High
CVE-2021-31841
DLL side loading vulnerability in MA for Windows
Vulnerability Description
A DLL sideloading vulnerability in McAfee Agent for Windows prior to 5.7.4 could allow a local user to perform a DLL sideloading attack with an unsigned DLL with a specific name and in a specific location. This would result in the user gaining elevated permissions and the ability to execute arbitrary code as the system user, through not checking the DLL signature.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-31841
Credits & Attribution
No credits recorded in the NVD database.
More from McAfee,LLC
View All →CVE-2022-1824
McAfee MCPR privilege escalation
High
7.9
CVE-2022-1823
McAfee MCPR privilege escalation
High
7.9
CVE-2022-1258
SQL injection vulnerability in McAfee Agent's ePO extension
High
8.4
CVE-2022-1257
Improper Verification of Cryptographic Signature by McAfee Agent
Medium
6.1
CVE-2022-1256
Improper Privilege Management in McAfee Agent for Windows
High
7.8
Affected Vendor
McAfee,LLC
View all reports →Affected Software
McAfee Agent for Windows
Vulnerable Versions:
unspecified
Timeline
Official Publish:
September 22nd, 2021
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
MITRE ATT&CK TTPs
T1574
Hijack Execution Flow
Privilege Escalation
T1036
Masquerading
Defense Evasion
T1543
Create or Modify System Process
Persistence
T1059
Command and Scripting Interpreter
Execution
T1569
System Services
Execution
T1553
Subvert Trust Controls
Defense Evasion
T1190
Exploit Public-Facing Application
Initial Access
T1078
Valid Accounts
Persistence
T1550
Use Alternate Authentication Material
Defense Evasion
T1565
Data Manipulation
Impact