The vulnerability of the McAfee Application and Change Control control tool arises from implementation errors in the execution restriction policy, allowing a malicious actor to execute arbitrary commands.

The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the execution restriction policy. Exploiting this vulnerability allows an attacker to execute arbitrary commands using the command line...

The vulnerability of the McAfee Application and Change Control control mechanism, related to errors in the implementation of the “blacklist” mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the McAfee Application and Change Control control tool is related to errors in the implementation of the “blacklist” mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions on file execution and execute arbitrary code...

CVE-2018-6668

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

Security feature bypass

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668 Bypass Application Control with simple DLL

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668

CVE-2018-6668 affects McAfee Application Control and Change Control, version 7.0.1 and earlier. A whitelist bypass vulnerability allows execution bypass, e.g., via a simple DLL through interpreters such as PowerShell. The connected sources confirm the issue and its impact is constrained to bypass...

CVE-2018-6668: Undefined Security Weakness

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability (CNVD-2019-07311)

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

CVE-2018-6669

McAfee Application Control and Change Control (versions 7.0.1 and earlier) contain a whitelist bypass vulnerability. A remote or local user can execute blacklisted files via an ASP.NET form, bypassing the intended restrictions. The CVE has CVSS v3.0 base score 8.0 (HIGH) with ADJACENT network att...

CVE-2018-6669

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form...

Security feature bypass

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form...

CVE-2018-6669: Direct Request

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form...

PT-2018-2691

Name of the Vulnerable Software and Affected Versions McAfee Application Control / Change Control version 7.0.1 and earlier Description The issue is related to a whitelist bypass, which can lead to execution bypass. This can be achieved, for example, through simple DLLs and interpreters such as...

PT-2018-2692

Name of the Vulnerable Software and Affected Versions McAfee Application Control / Change Control version 7.0.1 and earlier Description The issue is related to a whitelist bypass, allowing a remote or local user to execute blacklisted files. This is due to errors in the implementation of the...

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7358

CVE-2018-7358 affects ZTE ZXHN H168N devices (versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7, V2.2.0_PK11T) and is described as an improper change control vulnerability that may allow an unauthenticated attacker to perform unauthorized operations. Connected references document an access-c...

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

PT-2018-18045

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H168N versions V2.2.0 PK1.2T5, V2.2.0 PK1.2T2, V2.2.0 PK11T7, V2.2.0 PK11T Description The issue is related to an improper change control, which may allow an unauthorized user to perform unauthorized operations. Recommendations For...

CVE-2018-7358: Improper Authentication

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...