Medium severity6.7NVD Advisory· Published Mar 15, 2021· Updated Jun 17, 2026
CVE-2021-23879
CVE-2021-23879
Description
Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileges are required to place the files in the required location.
Affected products
3- cpe:2.3:a:mcafee:endpoint_product_removal_tool:*:*:*:*:*:*:*:*Range: <21.2
- Range: <21.2
- McAfee, LLC/Endpoint Product Removal Toolv5Range: 21.x
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.