CVE-2019-3586

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security ENS 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI...

CVE-2019-3586

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security ENS 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI...

CVE-2019-3602

Cross Site Scripting XSS vulnerability in McAfee Network Security Manager NSM Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML...

Session fixation

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security ENS 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI...

CVE-2019-3586 McAfee Endpoint Security firewall not always acting on GTI lookup results

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security ENS 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI...

CVE-2019-3586

CVE-2019-3586 affects McAfee Endpoint Security (ENS) Firewall in the 10.x line prior to 10.6.1. The issue is a protection mechanism failure where GTI-reputation-based decisions do not block connections from IPs flagged by GTI, allowing context-dependent attackers to bypass ENS protections via spe...

CVE-2019-3602 Cross site scripting vulnerability in McAfee NSM impacting authenticated users

Cross Site Scripting XSS vulnerability in McAfee Network Security Manager NSM Prior to 9.1 Update 5 allows an authenticated administrator to embed an XSS in the administrator interface via a specially crafted custom rule containing HTML...

CVE-2019-3602

CVE-2019-3602 is an XSS in McAfee Network Security Manager (NSM) before 9.1 Update 5. An authenticated administrator can embed an XSS in the NSM administrator interface via a specially crafted custom rule containing HTML. The provided documents do not specify root cause details or a patch/version...

Trend Micro is one of the anti-virus firms hacked by Fxsmsp

By Ryan De Souza Other two companies allegedly involved in the data breach are Symantec and McAfee. Recently Hackread.com informed you about a Russian group of hackers dubbed Fxsmsp that is specifically targeting trusted anti-virus companies and has attacked the servers of three mainstream firms...

May 14, 2019—KB4499151 (Monthly Rollup)

None None...

May 14, 2019—KB4499164 (Monthly Rollup)

None None...

Trellix Endpoint Security and Module Detection

Binary data mcafeeendpointsecurityinstalled.nbin...

LockerGoga Ransomware Family Used in Targeted Attacks

ARCHIVED STORY LockerGoga Ransomware Family Used in Targeted Attacks By ATR Operational Intelligence Team · April 29, 2019 Co-authored by Marc RiveroLopez. Initial discovery Once again, we have seen a significant new ransomware family in the news. LockerGoga, which adds new features to the tried...

Microsoft’s Latest Patch Hoses Some Antivirus Software

Microsoft’s April 9 security update is bogging down systems running antivirus software packages made by McAfee, Avast, ArcaBit, Avira and Sophos. According to Microsoft, the company’s April Patch Tuesday security update is causing some systems to have slow startup times, sluggish performance or...

IoT Zero-Days – Is Belkin WeMo Smart Plug the Next Malware Target?

ARCHIVED STORY IoT Zero-Days – Is Belkin WeMo Smart Plug the Next Malware Target? By Steve Povolny · April 18, 2019 Effective malware is typically developed with intention, targeting specific victims using either known or unknown vulnerabilities to achieve its primary functions. In this blog, we...

North Korea's Hidden Cobra Strikes U.S. Targets with HOPLIGHT

A never-before-seen spyware variant called HOPLIGHT is targeting U.S. companies and government agencies in active attacks, according to the U.S. Department of Homeland Security. In an advisory this week, the United States Computer Emergency Readiness Team US-CERT said that there are nine differen...

The vulnerability of the McAfee Application and Change Control control tool arises from implementation errors in the execution restriction policy, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the execution restriction policy. Exploiting this vulnerability allows an attacker to execute arbitrary commands using the command line...

The vulnerability of the McAfee Application and Change Control control mechanism, related to errors in the implementation of the “blacklist” mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the “blacklist” mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions on file execution and execute arbitrary code...

CVE-2019-3612

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line...

CVE-2019-3612

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line...