Lucene search

K
cveIntelCVE-2015-8986
HistoryMar 14, 2017 - 10:59 p.m.

CVE-2015-8986

2017-03-1422:59:00
CWE-254
intel
web.nvd.nist.gov
24
cve-2015-8986
hardware appliances
mcafee
intel security
advanced threat defense
matd
sandbox detection
evasion vulnerability
false-negative
malware detection

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

26.0%

Sandbox detection evasion vulnerability in hardware appliances in McAfee (now Intel Security) Advanced Threat Defense (MATD) 3.4.2.32 and earlier allows attackers to detect the sandbox environment, then bypass proper malware detection resulting in failure to detect a malware file (false-negative) via specially crafted malware.

Affected configurations

Nvd
Vulners
Node
mcafeeadvanced_threat_defenseRange3.4.2.32
VendorProductVersionCPE
mcafeeadvanced_threat_defense*cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Advanced Threat Defense (MATD)",
    "vendor": "Intel",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.2.32 and earlier"
      }
    ]
  }
]

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

26.0%

Related for CVE-2015-8986