CVE-2019-3652mediumCWE-94

CVE-2019-3652: medium-severity vulnerability in McAfee Endpoint Security (ENS)

ENS code injection in EPSetup.exe

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.3%
Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
McAfee, LLC · McAfee Endpoint Security (ENS)
Related CVEs — McAfee Endpoint Security (ENS)

In the same product, most dangerous first.

CVE-2019-3586HIGHMcAfee Endpoint Security firewall not always acting on GTI lookup resultsEPSS 0.8%CVE-2020-7331HIGHUnquoted service executable path in McAfee Endpoint Security (ENS)EPSS 0.4%CVE-2019-3582HIGHMcAfee Endpoint Security updates fix a privilege escalation vulnerabilityEPSS 0.4%CVE-2019-3653MEDIUMESConfig Tool access not controlledEPSS 0.2%