CVE-2015-8988

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2 and 2.1 allows authenticated users to execute a command of their choice via dropping a malicious file for the path.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
Intel	ePO Deep Command (eDC)	2.2 and 2.1

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10115Patch, Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10115Patch, Vendor Advisory

Timeline

Published: Mar 14, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-89898.8Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 CVE-2015-89907.5Detection bypass vulnerability in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier allows malware samples to bypass ATD detect CVE-2015-89917.0Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the product CVE-2015-89927.0Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momen CVE-2015-89937.0Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily CVE-2015-89947.5An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled. With 5.x aft CVE-2015-89957.8In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-89967.0In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using t CVE-2015-89977.0In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using CVE-2015-89987.8In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.CVE-2015-89997.8In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an CVE-2015-90007.8In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using th