CVE-2016-8020

HIGH

Intel Security VirusScan Enterprise Linux <2.0.3 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-8020. PoCs published by Andrew Fasano.

AI-analyzed exploit summary This exploit chains multiple vulnerabilities (CVE-2016-8016 to CVE-2016-8025) in McAfee ePolicy Orchestrator to achieve remote code execution as root. It cracks authentication cookies, manipulates update servers, and executes arbitrary payloads via SQL injection and file write vulnerabilities.

Description

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Andrew Fasano · pythonremotelinux
https://www.exploit-db.com/exploits/40911

This exploit chains multiple vulnerabilities (CVE-2016-8016 to CVE-2016-8025) in McAfee ePolicy Orchestrator to achieve remote code execution as root. It cracks authentication cookies, manipulates update servers, and executes arbitrary payloads via SQL injection and file write vulnerabilities.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Complex
Reliability
Reliable
Target: McAfee ePolicy Orchestrator (versions affected by CVE-2016-8016 to CVE-2016-8025)
No auth needed
Prerequisites: Network access to the target · Ability to host a malicious update server · Payload script (payload.sh)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94823
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037433
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/40911/

Scores

CVSS v3 8.0
EPSS 0.1110
EPSS Percentile 95.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-94
Status published
Products (2)
Intel/VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)
mcafee/virusscan_enterprise < 2.0.3
Published Mar 14, 2017
Tracked Since Feb 18, 2026