Lucene search

K
nvd[email protected]NVD:CVE-2023-0976
HistoryJun 07, 2023 - 8:15 a.m.

CVE-2023-0976

2023-06-0708:15:09
CWE-427
web.nvd.nist.gov
1
command injection
vulnerability
ta for mac-os
arbitrary file
library
trellix
agent
malicious
execution
deployment
system tree.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0

Percentile

13.3%

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/Β folder. The malicious file is executed by running the TA deployment feature located in the System Tree.

Affected configurations

Nvd
Node
trellixagentRange<5.7.9
AND
applemacosMatch-
VendorProductVersionCPE
trellixagent*cpe:2.3:a:trellix:agent:*:*:*:*:*:*:*:*
applemacos-cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0

Percentile

13.3%

Related for NVD:CVE-2023-0976