Unscored severity · published May 14, 2015
CVE-2015-3987
Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Epo Deep Command · Mcafee
2.1; 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3987
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3987
Third Party Advisory
http://www.securityfocus.com/bid/74685
Third Party Advisory
http://www.securitytracker.com/id/1032244
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10115
More from Epo Deep Command
8.8
CVE-2015-8988
Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to…