virus logo FortiClient Vulnerability

McAfee Security Scan Plus CVE-2017-3897 Code Injection Vulnerability

description-logoDescription

A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.

affected-products-logoAffected Applications

McAfee Security Scan Plus

CVE References

CVE-2017-3897

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3897
ID 2546
Created May 20, 2021
Description
Updated		 Oct 26, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor McAfee
Patch manual
Application McAfee Security Scan Plus