ZDI-CAN-20770: ZDI-23-1158: McAfee Safe Connect VPN Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of McAfee Safe Connect VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20770?
The severity of ZDI-CAN-20770 is considered critical due to the potential for local privilege escalation.
How do I fix ZDI-CAN-20770?
To fix ZDI-CAN-20770, ensure that you update McAfee Safe Connect VPN to the latest patched version provided by the vendor.
Who is affected by ZDI-CAN-20770?
ZDI-CAN-20770 affects users of McAfee Safe Connect VPN who are running vulnerable versions of the software.
Can an attacker exploit ZDI-CAN-20770 remotely?
No, an attacker must first gain low-privileged access to the local system to exploit ZDI-CAN-20770.
What types of attacks can ZDI-CAN-20770 enable?
ZDI-CAN-20770 can enable local attackers to escalate their privileges, potentially allowing full control of the affected system.