CVE-2017-3897

Critical

Published: 01/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-3897 describes a vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus versions prior to 3.11.599.3. This allows network attackers to execute malicious files via an HTTP backend response.

Risk Assessment

Organizations may be exposed to remote code execution, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update McAfee Live Safe to version 16.0.3 or later and McAfee Security Scan Plus to version 3.11.599.3 or later to mitigate this vulnerability.

Original NVD description (English source)

A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.