Rewterz

Rewterz Threat Alert – Confucious APT Targeting Victims in Pakistan and Kashmir

February 12, 2021
Rewterz

Rewterz Threat Alert – MuddyWater Campaign Using ScreenConnect RAT

February 12, 2021

Rewterz Threat Advisory – CVE-2021-23876 – McAfee Total Protection privilege escalation

Severity

High

Analysis Summary

CVE-2021-23876

McAfee Total Protection (MTP) could allow a local authenticated attacker to gain elevated privileges on the system, caused by a bypass remote procedure call flaw. By executing a specially-crafted program, an authenticated attacker could exploit this vulnerability to gain elevated privileges and perform arbitrary file modification as SYSTEM.

Impact

Gain Privileges

Affected Vendors

McAfee

Affected Products

McAfee Total Protection (MTP) 16.0

Remediation

Update to the latest version.

McAfee Document ID: TS103114

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.