CVE-2019-3586highCWE-693

CVE-2019-3586: high-severity vulnerability in McAfee Endpoint Security (ENS)

McAfee Endpoint Security firewall not always acting on GTI lookup results

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.8%
Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H
Affected products
McAfee, LLC · McAfee Endpoint Security (ENS)
Related CVEs — McAfee Endpoint Security (ENS)

In the same product, most dangerous first.

CVE-2020-7331HIGHUnquoted service executable path in McAfee Endpoint Security (ENS)EPSS 0.4%CVE-2019-3582HIGHMcAfee Endpoint Security updates fix a privilege escalation vulnerabilityEPSS 0.4%CVE-2019-3652MEDIUMENS code injection in EPSetup.exeEPSS 0.3%CVE-2019-3653MEDIUMESConfig Tool access not controlledEPSS 0.2%