Vulnerability Description
Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Network Security Manager | < 8.2.7.42.2 |
Related Weaknesses (CWE)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10192
- https://kc.mcafee.com/corporate/index?page=content&id=SB10192
FAQ
What is CVE-2017-3972?
CVE-2017-3972 is a vulnerability with a CVSS score of 8.3 (HIGH). Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner lea...
How severe is CVE-2017-3972?
CVE-2017-3972 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-3972?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Network Security Manager.