CVE-2016-8021

—

CVSS 3.0

5.0 medium

EPSS

3%p88

Published

Mar 14, 2017 (Mar 14, 2017)

Modified

Jun 17, 2026

Description

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file.

Vendors: mcafee
Products: virusscan enterprise
Weakness: CWE-347
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news2 stories

Hacking McAfee VirusScan Enterprise for Linux, upgrade it asap

Security AffairsDec 13, 15:41 UTC · Dec 13, 2016Exploit / PoC CVE-2016-8022 CVE-2016-8023 CVE-2016-8021+1 CVEs

McAfee Virus Scan Enterprise opens Linux machines to remote attackers

Help Net SecurityDec 13, 00:00 UTC · Dec 13, 2016Vulnerability CVE-2016-8022 CVE-2016-8023 CVE-2016-8021+1 CVEs