CVE-2019-3586CWE-693

McAfee Endpoint Security firewall not always acting on GTI lookup results

High · published May 15, 2019

CVSS v3.0
7.5
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00761 · 54.6th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2019-05-15T15:48Z
EPSS history
Timeline
  • 15 MAY 15:48Z
    McAfee Endpoint Security firewall not always acting on GTI lookup results
    cvelistv5