CVE-2019-3592: mcafee, llc mcafee agent (ma)
CVSS: 7.2v3.0HighModified
Published 18-07-2019Last modified 04-08-2024
Vulnerability summary
CVE-2019-3592 is a high (CVSS 7.2) vulnerability in mcafee, llc mcafee agent (ma). EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 23.8% of scored vulnerabilities.
CVSS score
7.2/10
010
High · v3.0 (CVE.org)EPSS score
0.32%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 18-07-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory.
CVSS metrics
3 scores · 2 sources · 2 versionsHigh 7.2Preferred score · CVE.org (CNA)
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:HSources2 sources · 6.7–7.2
- NVDNIST6.7MediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HDiffers
Medium 4.6Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
24%
Versus all other CVEs
30-day change
0.00 pp
From 0.32% on 19-09-2026
19-09-202619-10-2026
EPSS score0.32%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mcafee1 product
- agent≥ 5.0.0, ≤ 5.6.1
Mcafee, llc1 product
- mcafee agent (ma)≥ 5.x, < 5.6.1 HF3
2 vendors · 2 products
References
1 links- kc.mcafee.com/corporate/index?page=content&id=SB10288X Refsource CONFIRM