CVE-2017-3972 HIGH

CVE-2017-3972: SB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerability

Vendor Mcafee
Product Network Security Management (NSM)
Published April 3, 2018
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

What the vulnerability does

01Description

Infrastructure-based foot printing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to execute arbitrary code via the server banner leaking potentially sensitive or security relevant information.

Key dates

02Disclosure timeline

April 3, 2018 CVE published
September 16, 2024 Record updated