Vulnerability CVE-2015-8992


Published: 2017-03-14   Modified: 2017-03-15

Description:
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.

CVSS2 => (AV:L/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.9/10
10/10
3.4/10
Exploit range
Attack complexity
Authentication
Local
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Mcafee -> Security webadvisor 
Mcafee -> Cloud av 
Mcafee -> Security scan plus 

 References:
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462

Copyright 2024, cxsecurity.com

 

Back to Top