CVE-2017-4053

Critical

Published: 12/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-4053 is a Command Injection vulnerability in the web interface of McAfee Advanced Threat Defense (ATD) versions 3.10, 3.8, 3.6, and 3.4. It allows remote unauthenticated users or attackers to execute arbitrary commands via a crafted HTTP request parameter.

Risk Assessment

This vulnerability poses a significant risk to organizations as it allows attackers to remotely execute commands on the server, potentially leading to data loss or system compromise.

Recommendation

It is recommended to upgrade to the latest version of McAfee Advanced Threat Defense and implement appropriate security measures to restrict access to the web interface.

Original NVD description (English source)

Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticated users / remote attackers to execute a command of their choice via a crafted HTTP request parameter.