CVE-2018-6690

Published: Sep 18, 2018Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.

Affected (6)

Products: Mcafee: Application Change Control

Mcafee

1 product

Application Change Control

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mcafee Application Change Control	Up to 7.0.2
Mcafee Application Change Control	Version 8.0.0
Mcafee Application Change Control	Version 8.0.0 hotfix1
Mcafee Application Change Control	Version 8.0.0 hotfix2
Mcafee Application Change Control	Version 8.0.0 hotfix3
Mcafee Application Change Control	Version 8.0.0 hotfix4

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-346

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (4)

https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10250

Source: trellixpsirt@trellix.com

https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10250

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.