CVE-2016-3984

Published Apr 8, 2016

Last updated 8 years ago

Overview

Description: The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 5.1
Impact score: 4.2
Exploitability score: 0.8
Vector string: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 3.6
Impact score: 4.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-284

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mcafee:active_response:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "543B3BBE-A5D5-4EC9-BBDE-646EC654CB43",
            "versionEndIncluding": "1.1.0.158"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "988ACD16-D8B6-4934-9653-4E10857BFA83",
            "versionEndIncluding": "5.0.2.285"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2CBBB9A7-B7D6-4A59-85CA-A4C840BB9B24",
            "versionEndIncluding": "2.0.0.430.1"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BC49C347-3C2B-4A2B-BA39-22E70ED3F835",
            "versionEndIncluding": "9.3.0"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:p1_hf2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "68E9052A-ACB0-4791-AFEB-98DBBF537A5B",
            "versionEndIncluding": "9.4.0"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "997552D0-C322-4E13-8944-C6E56428EE33",
            "versionEndIncluding": "10.0.1"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:host_intrusion_prevention:*:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EED9A958-538B-4B25-9696-6850508D8D54",
            "versionEndIncluding": "8.0.0"
          },
          {
            "criteria": "cpe:2.3:a:mcafee:virusscan_enterprise:*:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EDF04428-E664-4922-B950-DB61BE5AD13F",
            "versionEndIncluding": "8.8.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References