Medium severity · published Jul 26, 2024
CVE-2024-27357
An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS
5.8
CVSS
0.2%
EPSS
No
On KEV
Description
An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and WithSecure MDR through 23.x for macOS. Local Privilege Escalation can occur during installations or updates by admins.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client Security · Withsecure
through 15.0 · source: CISA
EE
Elements Endpoint Protection · Withsecure
before 24.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-27357
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-27357
www.withsecure.com
https://www.withsecure.com/en/support/security-advisories/cve-2024-27357
More from Client Security
7.8
CVE-2024-4454
WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
7.8
CVE-2023-47172
Certain WithSecure products allow Local Privilege Escalation
7.5
CVE-2024-27359
Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive file
7.5
CVE-2023-47263
Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file
7.5
CVE-2023-47264
Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS)