cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

CVE-2021-40444 - When will the detection be added to our DAILY AMCORE / DAT release

HI McAfee Support,

I saw that there was a Mcafee KB on this "CVE-2021-40444 - MSHTML Remote Code Execution" at https://kc.mcafee.com/corporate/index?page=content&id=KB94876

 

By using this EXTRA DAT. I have few Question below:

1. As per link above, after we check-in this EXTRA DAT to our McAfee EPO, do we still need to add the SHA/HASH to Ban list > to our McAfee Solidcore Rule > UNder Execurtable FILE > Ban rule?

2. When will the detection be added to our DAILY AMCORE / DAT release ?

Regards,

William

3 Replies
Sivakumar1
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: CVE-2021-40444 - When will the detection be added to our DAILY AMCORE / DAT release

Hello @WillLAus20 

Thank you for reaching out to community. Please find the answers below,

1. 1. As per link above, after we check-in this EXTRA DAT to our McAfee EPO, do we still need to add the SHA/HASH to Ban list > to our McAfee Solidcore Rule > UNder Execurtable FILE > Ban rule?

Since Extra DAT has detections over all the hashes , It is not required to add up in Solid core rules. 

2. When will the detection be added to our DAILY AMCORE / DAT release ?

Almost Detections for all the hashes mentioned in the article [McAfee Enterprise coverage for CVE-2021-40444 - MSHTML Remote Code Execution] is added in the regular DAT. Please do subscribe to the article and you will get an update on this. 

 

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Re: CVE-2021-40444 - When will the detection be added to our DAILY AMCORE / DAT release

I want to get an assurance that, detection for CVE-2021-40444 is now added OFFICIALLY on

Amcore ver 10107
and
DAT ver 4559.0

 

*For both above were release today, detection for the above Bad Hashes and Bad Http, are now OFFICIALLY on the above Amcore and DAT ???

 

Regards,

William

 

Sivakumar1
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: CVE-2021-40444 - When will the detection be added to our DAILY AMCORE / DAT release

Hello @WillLAus20 . Thank you for the post. Once the all the detections are added , It would be officially confirmed on the article and As well I will confirm it over here as well.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community