Vulnerability Description
Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.
CVSS Score
8.2
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Network Security Manager | < 8.2.7.42.2 |
Related Weaknesses (CWE)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10192
- https://kc.mcafee.com/corporate/index?page=content&id=SB10192
FAQ
What is CVE-2017-3971?
CVE-2017-3971 is a vulnerability with a CVSS score of 8.2 (HIGH). Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyph...
How severe is CVE-2017-3971?
CVE-2017-3971 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-3971?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Network Security Manager.