← CVE Intelligence

CVE-2021-31842

McAfee,LLC / McAfee Endpoint Security (ENS) for WIndows PUBLISHED

Description (CNA)

XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.

Affected (CNA)

Vendor / productVersions
McAfee,LLC / McAfee Endpoint Security (ENS) for WIndowsaffected unspecified before 10.7.0 September 2021 Update

CWE

CWE-776

References

ADP enrichment

CVE

No English description supplied.