CVE-2016-8020

—

CVSS 3.0

8.0 high

EPSS

11%p96

Published

Mar 14, 2017 (Mar 14, 2017)

Modified

Jun 17, 2026

Description

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.

Vendors: mcafee
Products: virusscan enterprise
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.1%)

In the news2 stories

Hacking McAfee VirusScan Enterprise for Linux, upgrade it asap

Security AffairsDec 13, 15:41 UTC · Dec 13, 2016Exploit / PoC CVE-2016-8022 CVE-2016-8023 CVE-2016-8021+1 CVEs

McAfee Virus Scan Enterprise opens Linux machines to remote attackers

Help Net SecurityDec 13, 00:00 UTC · Dec 13, 2016Vulnerability CVE-2016-8022 CVE-2016-8023 CVE-2016-8021+1 CVEs