Medium severity · published Nov 13, 2019
CVE-2019-3648
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully…
6.7
CVSS
0.7%
EPSS
No
On KEV
Description
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Anti-virus Plus · Mcafee
through 16.0.r22 · source: NVD
IS
Internet Security · Mcafee
through 16.0.r22 · source: NVD
TP
Total Protection · Mcafee
through 16.0r22 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3648
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3648
safebreach.com
https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648
service.mcafee.com
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984
More from Anti-virus Plus
4.4
CVE-2017-4028
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into…