Vulnerability Description
A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Anti-Virus Plus | <= 16.0.r22 |
| Mcafee | Internet Security | <= 16.0.r22 |
| Mcafee | Total Protection | <= 16.0r22 |
Related Weaknesses (CWE)
References
- https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-
- https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS1029
- https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-
- https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS1029
FAQ
What is CVE-2019-3648?
CVE-2019-3648 is a vulnerability with a CVSS score of 6.1 (MEDIUM). A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious fil...
How severe is CVE-2019-3648?
CVE-2019-3648 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3648?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Anti-Virus Plus, Mcafee Internet Security, Mcafee Total Protection.