CVE-2023-0978

low-risk

Published 2023-03-13

A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack

Do I need to act?

0.72% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.4/10 Medium

LOCAL / HIGH complexity

Affected Products (3)

Advanced Threat Defense

Intelligent Sandbox

Affected Vendors

Mcafee Trellix

References (2)

Vendor Advisory https://kcm.trellix.com/corporate/index?page=content&id=SB10397

/ 100

low-risk

Severity 17/34 · Moderate

Exploitability 2/34 · Minimal

Exposure 9/34 · Low