CVE-2017-3897 A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allo...
CriticalCVSS 9.8
EPSS 11.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee livesafe | <= 16.0.2 | No fix listed |
| mcafee security scan plus | <= 3.11.599.2 | No fix listed |
| mcafee Live Safe | = 16.0.3 | No fix listed |
| mcafee security scan plus | = 3.11.599.3 | No fix listed |
References
- service.mcafee.com vendor-advisory
- 100100 third-party-advisory vdb-entry