CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Windows. It may lead to a denial-of-service condition.
CVE
CVE-2021-31842
Severity
MEDIUM
CVSS
5
EPSS
0.23%
Windows
Original NVD Description
XML Entity Expansion injection vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2021 Update allows a local user to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process.
Related CVEs
Other vulnerabilities affecting the same vendor(s)