Skip to content
CVE Tracker
Back

CVE-2017-4028

SB10193 - consumer and corporate products - Maliciously misconfigured registry vulnerability

Medium5.0EPSS 0.53%
Published
Updated
Reserved
Assigned by
trellix

Description

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters.

Scores

CVSS scores of CVE-2017-4028, by who scored it
Scored byCVSSScoreVector
trellixCNA (assigner)3.0Medium5.0CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N
NVDNVD · Modified3.0Medium4.4CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
0.53% · top 55% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

Affected products

  • McAfee · McAfee Anti-Virus Plus (AVP)

    • affected 170329 – < 29 Mar 2017

  • McAfee · McAfee Endpoint Security (ENS)

    • affected 10.2 – < 10.2 DAT V3 DAT 2932.0

  • McAfee · McAfee Host Intrusion Prevention (Host IPS)

    • affected 8.0 – < 8.0 Patch 9 Hotfix 1188590

  • McAfee · McAfee Internet Security (MIS)

    • affected 170329 – < 29 Mar 2017

  • McAfee · McAfee Total Protection (MTP)

    • affected 170329 – < 29 Mar 2017

  • McAfee · McAfee Virus Scan Enterprise (VSE)

    • affected 8.8 – < 8.8 Patch 8/9 Hotfix 1187884

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .