McAfee Active Response vulnerabilities

7 CVEs affecting McAfee Active Response, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7326, published 2020-10-15.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3644, published 2019-09-11. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.
• CVE-2019-3643, published 2019-09-11. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.
• CVE-2016-3984, published 2016-04-08. Medium severity, CVSS 5.1. EPSS: 1.1% chance of exploitation in the next 30 days. The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1,…
• CVE-2020-7326, published 2020-10-15. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core…
• CVE-2020-7289, published 2020-05-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not…
• CVE-2020-7290, published 2020-05-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not…
• CVE-2020-7291, published 2020-05-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been…