Is CVE-2019-3663 actively exploited?

No active exploitation of CVE-2019-3663 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2019-3663 be exploited remotely?

No. CVE-2019-3663 requires local access to exploit.

What is the CVSS score of CVE-2019-3663?

CVE-2019-3663 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2019-3663

HIGH

CVE-2019-3663

CWE-522Published: November 14, 2019· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details

NVD Source

Technical Analysis

CVE-2019-3663 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.