How severe is CVE-2019-3621?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Is CVE-2019-3621 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Mcafee Data_loss_prevention_endpoint

CVE-2019-3621

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen bei…

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H.

Affected products

Mcafee Data_loss_prevention_endpoint
Mcafee, Llc Data Loss Prevention (Dlpe) For Windows — versions 11.x
Microsoft Windows

Public proof-of-concept exploits

sjl-is-big-idiot/loophole-demo

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)
trellixpsirt@trellix.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-3621?: CVE-2019-3621 is a medium-severity vulnerability in Mcafee Data_loss_prevention_endpoint. CVSS score: 6.8/10. Published 2019-07-25.
How severe is CVE-2019-3621?: Medium severity. CVSS v3 base score is 6.8 out of 10.
Is CVE-2019-3621 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.