Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
McAfee ePolicy Orchestrator HTTP GET请求远程格式串漏洞
Vulnerability Description
McAfee Security ePolicy Orchestrator是企业级反病毒管理工具，ePolicy Orchestrator通过策略驱动配置和报告，有效管理用户桌面和服务的反病毒工具。 ePolicy Orchestrator在处理网络请求时存在漏洞，远程攻击者利用这个漏洞进行格式串攻击，可能以SYSTEM权限在系统上执行任意指令。 攻击者可以搜索反病毒防火墙，并访问TCP 8081端口，发送包含格式字符串字符的GET请求会导致服务崩溃，事件会记录到日志文件中，精心构建请求数据可能以SYSTE
CVSS Information
N/A
Vulnerability Type
N/A