CVE-2018-6690 McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

HighCVSS 7.1 EPSS 0.26%

Published: 2018-09-19 01:00
Updated: 2026-06-17 05:02
Exploit status: No public exploit known

Description

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.

Affected products

Product	Affected versions	Fixed in
mcafee application change control	<= 7.0.2	No fix listed
mcafee application change control	= 8.0.0	No fix listed
mcafee application change control	= 8.0.0-hotfix1	No fix listed
mcafee application change control	= 8.0.0-hotfix2	No fix listed
mcafee application change control	= 8.0.0-hotfix3	No fix listed
mcafee application change control	= 8.0.0-hotfix4	No fix listed
McAfee Application Control (MAC)	>= 8.0.0 HF 4, <= 8.0.0 HF 4	No fix listed

References

CVSS v3.1

7.1 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector: Local
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

All scores (4)

v3.1 7.1 · nvd@nist.gov
v3.0 6.1 · trellix
v3.0 6.1 · trellixpsirt@trellix.com
v2.0 3.6 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.26% (percentile 18.1)
CWE: CWE-346

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.