CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 11.7% probability of exploitation in the next 30 days.
CVE
CVE-2017-3897
Severity
CRITICAL
CVSS
9.8
EPSS
11.68%
Original NVD Description
A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malicious file execution via a HTTP backend-response.
Related CVEs
Other vulnerabilities affecting the same vendor(s)