CVE-2018-6690: McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-18 · updated 2026-06-17
Weakness: CWE-346

Description

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.

Affected products

McAfee Application and Change Control: through 7.0.2; 8.0.0, 8.0.0-hotfix1, 8.0.0-hotfix2, 8.0.0-hotfix3, 8.0.0-hotfix4

References

https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf
https://kc.mcafee.com/corporate/index?page=content&id=SB10250
https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf
https://kc.mcafee.com/corporate/index?page=content&id=SB10250

Get alerted when CVE-2018-6690 or the next vulnerability affects your stack