CVE-2021-31842: 
Trellix Endpoint Security Agent vulnerability analysis and mitigation

XML Entity Expansion injection vulnerability affects McAfee Endpoint Security (ENS) for Windows prior to version 10.7.0 September 2021 Update. This vulnerability was discovered in 2021 and assigned identifier CVE-2021-31842. The vulnerability allows local users to initiate high CPU and memory consumption resulting in a Denial of Service attack through carefully editing the EPDeploy.xml file and then executing the setup process (NVD).

The vulnerability is classified as an XML Entity Expansion injection (CWE-776) with a CVSS v3.1 base score of 5.5 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The attack requires local access, low attack complexity, and low privileges. The vulnerability does not impact confidentiality or integrity but has a high impact on system availability (NVD).

When exploited, this vulnerability can lead to high CPU and memory consumption, resulting in a Denial of Service condition. The impact is limited to system availability, with no direct effect on data confidentiality or integrity (NVD).

The vulnerability has been patched in McAfee Endpoint Security (ENS) for Windows version 10.7.0 September 2021 Update. Users are advised to upgrade to this version or later to mitigate the vulnerability (NVD, McAfee Advisory).