CVE-2018-6686

Published: Jul 27, 2018Modified: Jun 17, 2026

6.6

Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.7 / Impact: 5.9

Source: NVD

Description

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances.

Affected (1)

Products: Mcafee: Drive Encryption

Mcafee

1 product

Drive Encryption

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Drive Encryption	From 7.1.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10242

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10242

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.