CVE-2024-0206 describes a symbolic link manipulation vulnerability in Trellix Anti-Malware Engine versions prior to January 2024, affecting both the engine itself and Microsoft Windows. An authenticated local user could exploit this by creating a symbolic link in the registry, allowing the engine to delete files the user normally couldn't access, leading to potential escalation of privileges. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6600CPE matchmatch criteria | cpe:2.3:a:trellix:anti-malware_engine:6600:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.