CVE-2021-31838

9.1 criticalEPSS 2.1%

Critical (9.1) in mcafee mvision edr. EPSS 2.1% chance of exploitation in the next 30 days.

A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2021-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:mvision_edr

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10342
https://kc.mcafee.com/corporate/index?page=content&id=SB10342

Check your stack JSON