CVE Feed

    Dashboard / CVE / CVE-2016-3984

    CVE-2016-3984

    The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL) before 2.0.1.140.1, Data Loss Prevention Endpoint (DLPe) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control (MDC) 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Endpoint Security (ENS) 10.x before 10.1, Host Intrusion Prevention Service (IPS) 8.0 before 8.0.0.3624, and VirusScan Enterprise (VSE) 8.8 before P7 (8.8.0.1528) on Windows allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.

    Published:Apr 8, 2016
    Last Modified:Apr 12, 2025
    EPS:Apr 8, 2016
    EPSS Score:0.0029
    CVSS Score:5.1

    Affected Products

    Vendor
    Mcafee
    Product
    Active Response
    Vendor
    Mcafee
    Product
    Agent
    Vendor
    Mcafee
    Product
    Data Exchange Layer
    Vendor
    Mcafee
    Product
    Data Loss Prevention Endpoint
    Vendor
    Mcafee
    Product
    Endpoint Security
    Vendor
    Mcafee
    Product
    Host Intrusion Prevention
    Vendor
    Mcafee
    Product
    Virusscan Enterprise

    Exploits

    http://lab.mediaservice.net/advisory/2016-01-mcafee.txthttps://www.exploit-db.com/exploits/39531/http://lab.mediaservice.net/advisory/2016-01-mcafee.txthttps://www.exploit-db.com/exploits/39531/https://www.exploit-db.com/exploits/39531

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2020-7326 (CVSS 6) — Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administr…
    CVE-2020-7290 (CVSS 7.8) — Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a …
    CVE-2020-7291 (CVSS 7.8) — Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a ma…
    CVE-2020-7289 (CVSS 7.8) — Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows …
    CVE-2019-3644 (CVSS 7.5) — McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, po…
    CVE-2019-3643 (CVSS 5.3) — McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, po…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High