mcafee anti-virus-plus CVE-2019-3648 vulnerability in McAfee Products
Published on November 13, 2019

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.

NVD

Vulnerability Analysis

CVE-2019-3648 is exploitable with local system access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and a small impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
NONE
Integrity Impact:
HIGH
Availability Impact:
LOW

Products Associated with CVE-2019-3648

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-3648 are published in these products:

McAfee Anti Virus Plus
 
McAfee Internet Security
 
McAfee Total Protection
 

Affected Versions

McAfee,LLC McAfee Total Protection:

Exploit Probability

EPSS
0.17%
Percentile
38.05%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.