Security readout for executives and security teams
Plain-English summary
This vulnerability can let a remote attacker disrupt McAfee Web Gateway scanning proxies, causing denial of service. It affects MWG versions earlier than 7.8.2.13. The business impact is service availability: web filtering or proxy scanning could become unreliable or unavailable.
Executive priority
Treat as a high-priority availability issue for organizations relying on MWG for web proxying or scanning. Patch affected scanners promptly, especially where outage would disrupt business browsing or security inspection.
Technical view
CVE-2019-3644 maps MWG exposure to CVE-2019-9517 and affects McAfee Web Gateway scanning proxies before 7.8.2.13. CVSS 3.1 is 7.5: network reachable, low complexity, no privileges, no user interaction, with high availability impact and no stated confidentiality or integrity impact.
Likely exposure
Exposure is most likely where McAfee Web Gateway scanning proxies run versions earlier than 7.8.2.13 and process remote or untrusted traffic. The bundle does not identify specific configurations beyond MWG scanning proxies.
Exploitation context
The source bundle does not indicate active exploitation, and KEV is false. The CVSS vector indicates unauthenticated remote denial of service is plausible, but no exploit maturity or public exploitation evidence is provided.
Researcher notes
Evidence is limited to CVE metadata and the McAfee advisory reference. No CWE, exploit details, or alternate mitigations are provided in the bundle. Analysis should stay scoped to MWG scanning proxies before 7.8.2.13.
Mitigation direction
- Upgrade affected MWG scanning proxies to 7.8.2.13 or later.
- Review McAfee advisory SB10296 for deployment-specific guidance.
- Prioritize externally reachable or high-traffic scanning proxy deployments.
- Monitor proxy availability and capacity during remediation.
- Confirm downstream web access continuity after update.
Validation and detection
- Inventory all McAfee Web Gateway scanner versions.
- Flag any MWG scanning proxy earlier than 7.8.2.13.
- Verify upgraded systems report 7.8.2.13 or later.
- Check whether affected proxies handle untrusted remote traffic.
- Review monitoring for unexplained proxy availability incidents.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2019-3644 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H3.93.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
7.5HighVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://kc.mcafee.com/corporate/index?page=content&id=SB10296CVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.