Maple Labs

CVE search · CVE-2023-0978

CVE-2023-0978

medium 6.7

A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
trellixpsirt@trellix.com
Weakness
CWE-77

Severity

VersionScoreVectorSource
CVSS 3.1 medium 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H trellixpsirt@trellix.comSecondary
CVSS 3.1 medium 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • mcafee · advanced_threat_defense
  • trellix · intelligent_sandbox

References