Описание
Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA Framework service crash) and possibly execute arbitrary code via unspecified vectors.
Ссылки
- Vendor Advisory
- Patch
- Vendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:mcafee:common_management_agent:3.6.0.438:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:protectionpilot:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:protectionpilot:1.1.1:p3:*:*:*:*:*:*
cpe:2.3:a:mcafee:protectionpilot:1.5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.12437
Средний
7.6 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA Framework service crash) and possibly execute arbitrary code via unspecified vectors.
EPSS
Процентиль: 94%
0.12437
Средний
7.6 High
CVSS2
Дефекты
NVD-CWE-Other