CVE-2019-3592: high-severity vulnerability in McAfee Agent (MA)
MA for Windows update addresses weak directory permissions
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 0.3%
Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory.
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
McAfee, LLC · McAfee Agent (MA)Related CVEs — McAfee Agent (MA)
In the same product, most dangerous first.
CVE-2019-3598MEDIUMMcAfee Agent update fixes a vulnerability in handling UDP requestsEPSS 1.9%CVE-2019-3599MEDIUMMcAfee Agent update fixes an Information Disclosure vulnerabilityEPSS 1.8%CVE-2019-3613MEDIUMDLL search order hijacking in MAEPSS 0.4%CVE-2020-7253MEDIUMImproper access control vulnerability in McAfee AgentEPSS 0.2%