Code Injection Vulnerability in McAfee Live Safe and McAfee Security Scan Plus

CVE-2017-3897 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.

Learn more about our Network Penetration Testing.