What’s Vulnerable › Vulnerabilities

CVE-2017-3971: SB10192 - Network Security Management (NSM) - Cryptanalysis vulnerability

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-04 · updated 2026-06-17
• Weakness: CWE-326

Description

Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.

Affected products

• McAfee Network Security Management (NSM): before 8.2.7.42.2 — fixed in 8.2.7.42.2

How to fix

Upgrade to a fixed version: McAfee Network Security Management (NSM) 8.2.7.42.2. Check the vendor advisory for mitigations.

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10192
• https://kc.mcafee.com/corporate/index?page=content&id=SB10192

Get alerted when CVE-2017-3971 or the next vulnerability affects your stack