CVE-2019-3644: MWG scanners updated to address CVE-2019-9517

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-09-11 · updated 2026-06-17

Description

McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.

Affected products

McAfee,LLC McAfee Active Response: 1.0.0, 1.1.0, 2.0, 2.0.1, 2.1, 2.2 (+2)
McAfee Advanced Threat Defense (ATD): 4.0, 4.2, 4.4, 4.6
McAfee, LLC McAfee Enterprise Security Manager (ESM): 10.2.0, 10.3.4, 10.4.0, 11.0.0, 11.1.0, 11.1.1 (+3)
McAfee Web Gateway (MWG): from 7.7.2.0 before 7.7.2.24; from 7.8.2 before 7.8.2.13; from 8.0.0 before 8.2.0 — fixed in 7.7.2.24, 7.8.2.13, 8.2.0

How to fix

Upgrade to a fixed version: McAfee Web Gateway (MWG) 7.7.2.24, 7.8.2.13, 8.2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-3644 or the next vulnerability affects your stack