CVE-2017-4053 Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their ch...
CriticalCVSS 9.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee advanced threat defense | = 3.4 | No fix listed |
| mcafee advanced threat defense | = 3.6 | No fix listed |
| mcafee advanced threat defense | = 3.8 | No fix listed |
| mcafee advanced threat defense | = 3.10 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.10 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.8 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.6 | No fix listed |
| mcafee Advanced Threat Defense (ATD) | = 3.5 | No fix listed |
References
- 99560 vdb-entry
- kc.mcafee.com patch vendor-advisory