What is the CVSS score of CVE-2012-4598?

CVE-2012-4598 has a CVSS 2.0 base score of 9.3 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 67.9%.

Is there a public PoC exploit available for CVE-2012-4598?

Yes, a public proof-of-concept exploit is available for CVE-2012-4598. Prioritise patching immediately. EPSS: 67.9%.

Mcafee Virtual Technician CVE-2012-4598

CRITICAL

2012-08-22 cve@mitre.org

Denial Of Service RCE Mcafee Virtual Technician Epo Mcafee Virtual Technician

9.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 22, 2012 - 10:42 cve.org

CRITICAL 9.3

DescriptionCVE.org

AnalysisAI

An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 67.9%.

Technical ContextAI

An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via a crafted web site. Affected products include: Mcafee Mcafee Virtual Technician, Mcafee Epo Mcafee Virtual Technician. Version information: before 6.4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.