critical9.8Public exploit code
CVE-2017-3897
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- McAfee Security Scan Plus - Remote Command Execution2017-07-30 · remote · windows
Impact
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Livesafe | through 16.0.2 |
| Mcafee | Security Scan Plus | through 3.11.599.2 |