CVE-2016-8022

HIGH

Intel Security VSEL <2.0.3 - RCE

Title source: llm

Description

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Andrew Fasano · pythonremotelinux
https://www.exploit-db.com/exploits/40911

Scores

CVSS v3 7.5
EPSS 0.0858
EPSS Percentile 92.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-287
Status draft

Affected Products (1)

mcafee/virusscan_enterprise < 2.0.3

Timeline

Published Mar 14, 2017
Tracked Since Feb 18, 2026