McAfee Security Scan Plus vulnerabilities

7 CVEs affecting McAfee Security Scan Plus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-37025, published 2022-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3897, published 2017-09-01. Critical severity, CVSS 9.8. EPSS: 11.7% chance of exploitation in the next 30 days. A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3…
CVE-2016-8026, published 2017-03-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users to gain elevated privileges via unspecified vectors.
CVE-2016-8008, published 2017-03-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a…
CVE-2015-8993, published 2017-03-14. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily vulnerable via executing preexisting specifically crafted…
CVE-2015-8992, published 2017-03-14. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momentarily vulnerable via executing preexisting specifically…
CVE-2015-8991, published 2017-03-14. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product momentarily vulnerable via executing preexisting…
CVE-2022-37025, published 2022-08-18. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land)…