High severity · published Mar 14, 2017
CVE-2015-8992
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing…
7.0
CVSS
0.3%
EPSS
No
On KEV
Description
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted malware during installation or uninstallation, but not during normal operation.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cloud AV · Mcafee
All versions, or not specified · source: NVD
SS
Security Scan Plus · Mcafee
All versions, or not specified · source: NVD
SW
Security Webadvisor · Mcafee
3.7.2; 4.0.1; 4.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8992
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8992
Vendor Advisory
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102462
More from Cloud AV
7.0
CVE-2015-8993
Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting…
7.0
CVE-2015-8991
Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing…