CVE-2017-3962

CVE-2017-3962 is a critical password recovery exploitation vulnerability affecting the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) versions prior to 8.2.7.42.2. This flaw allows attackers to crack user passwords due to the use of unsalted hashes. With a CVSS score of 9.8 (CRITICAL), it presents a high risk as it can be exploited remotely with low complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.