PT-2017-7519 · Mcafee · Mcafee Epo Deep Command
Published
2017-03-14
·
Updated
2017-03-23
·
CVE-2015-8988
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
McAfee ePO Deep Command (eDC) versions 2.1 through 2.2
Description
The issue allows authenticated users to execute a command of their choice via dropping a malicious file for an unquoted executable path in the Client Management and Gateway components.
Recommendations
For versions 2.1 and 2.2, consider restricting access to the affected components until a fix is available.
As a temporary workaround, avoid using the unquoted executable path in the Client Management and Gateway components to minimize the risk of exploitation.
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mcafee Epo Deep Command