ZDI-23-1158: McAfee Safe Connect VPN Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Published Aug 21, 2023
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of McAfee Safe Connect VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
1 affected component
McAfee Safe Connect VPN
Event History
Aug 21, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-1158?
The severity of ZDI-23-1158 is classified as a privilege escalation vulnerability.
2
How do I fix ZDI-23-1158?
To fix ZDI-23-1158, ensure that you update your McAfee Safe Connect VPN to the latest version provided by the vendor.
3
Who is affected by ZDI-23-1158?
Any user with McAfee Safe Connect VPN installed on their system is potentially affected by ZDI-23-1158.
4
What type of attacks does ZDI-23-1158 allow?
ZDI-23-1158 allows local attackers to escalate privileges on affected systems.
5
What conditions are required to exploit ZDI-23-1158?
An attacker must first have the ability to execute low-privileged code on the target system to exploit ZDI-23-1158.