cbcvebase.
CVE-2013-0141
published 2013-05-01

CVE-2013-0141: Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files…

PriorityP434medium4.3CVSS 2.0
AVAACMAuNCPIPAN
EXPLOIT
EPSS
1.12%
62.0th percentile
Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

Affected

19 ranges
VendorProductVersion rangeFixed in
mcafeeepolicy_orchestrator<= 4.5.6—
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
mcafeeepolicy_orchestrator——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.