Unscored severity · published Aug 10, 2011
CVE-2011-3007
The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Saas Endpoint Protection · Mcafee
through 5.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3007
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3007
dvlabs.tippingpoint.com
http://dvlabs.tippingpoint.com/advisory/TPTI-11-13
osvdb.org
http://osvdb.org/74513
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/69093
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10016
More from Saas Endpoint Protection
–
CVE-2011-5101
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam
–
CVE-2011-3006
The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the…