Vulnerabilities

CVE-2021-31836

September 29, 2021

Improper privilege management vulnerability in maconfig for McAfee Agent for Windows prior to 5.7.4 allows a local user to gain access to sensitive information. The utility was able to be run from any location on the file system and by a low privileged user.

Summary:

Reference Links(if available):

https://kc.mcafee.com/corporate/index?page=content&id=SB10369

CVSS Score (if available)

v2: / LOW

v3: /

Links to Exploits(if available)

Tags: CONFIRM, CVE, CVE-2021-31836, patch, vulnerability

CVE-2021-31836

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

CISA: CISA Releases Three Industrial Control Systems Advisories

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

CISA: CISA Releases Three Industrial Control Systems Advisories