4294 matches found
CVE-2018-6704
Privilege escalation vulnerability in McAfee Agent MA for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions...
Operation Sharpshooter Takes Aim at Global Critical Assets
Researchers have detected a widespread reconnaissance campaign using a never-before-seen implant framework to infiltrate global defense and critical infrastructure players — including nuclear, defense, energy and financial companies. The campaign, dubbed Operation Sharpshooter, began Oct. 25 when...
PT-2018-2861 · Mcafee · Mcafee Agent For Linux
Name of the Vulnerable Software and Affected Versions: McAfee Agent for Linux versions 5.0.0 through 5.0.6 McAfee Agent for Linux version 5.5.0 McAfee Agent for Linux version 5.5.1 Description: The issue is related to a privilege escalation vulnerability that allows local users to perform arbitra...
CVE-2018-6703
Use After Free in Remote logging which is disabled by default in McAfee McAfee Agent MA 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service...
CVE-2018-6703
Use After Free in Remote logging which is disabled by default in McAfee McAfee Agent MA 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service...
Design/Logic Flaw
Use After Free in Remote logging which is disabled by default in McAfee McAfee Agent MA 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service...
CVE-2018-6703 Remote Logging functionality had a use after free vulnerability in McAfee Agent
Use After Free in Remote logging which is disabled by default in McAfee McAfee Agent MA 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service and potentially a remote code execution via a specially crafted HTTP header sent to the logging service...
CVE-2018-6703
CVE-2018-6703 describes a use-after-free vulnerability in the remote logging feature of McAfee Agent (MA) 5.x, prior to 5.6.0. The issue allows unauthenticated remote attackers to trigger a denial of service and potentially remote code execution by sending specially crafted HTTP headers to the lo...
PT-2018-2780 · Mcafee · Mcafee Agent
Name of the Vulnerable Software and Affected Versions: McAfee Agent versions prior to 5.6.0 Description: The issue is related to a use after free vulnerability in the client component of McAfee Agent. This can be exploited by sending specially crafted HTTP requests, potentially allowing a remote...
ICSA-18-345-01 McAfee SINAMICS PERFECT HARMONY GH180
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low skill level to exploit Vendor: McAfee Equipment: SINAMICS PERFECT HARMONY GH180 Vulnerability: Improper Access Control 2. RISK EVALUATION These files can be executed to compromise the HMI, and by extension, the drive system. 3. TECHNICAL DETAILS...
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation McAfee True Key: Multiple Issues with McAfee.TrueKey.Service Implementation Platform: Version 5.1.173.1 on Windows 10 1809. Class: Elevation of Privilege Summary: There are multiple issues in the implementation of the...
PT-2018-3690 · Mcafee · Mcafee Agent
Name of the Vulnerable Software and Affected Versions: McAfee Agent versions 5.0.0 through 5.0.6 McAfee Agent versions 5.5.0 and 5.5.1 Description: The issue is related to insecure handling of temporary files in the McAfee Agent, which can be exploited by an unprivileged user to introduce custom...
PT-2018-2572 · Mcafee · Mcafee Agent For Linux
Name of the Vulnerable Software and Affected Versions: McAfee Agent for Linux versions 5.0.0 through 5.0.6 McAfee Agent for Linux version 5.5.0 McAfee Agent for Linux version 5.5.1 Description: The issue is related to insufficient access control in the client component, which can be exploited to...
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
McAfee True Key: Multiple Issues with McAfee.TrueKey.Service Implementation Platform: Version 5.1.173.1 on Windows 10 1809. Class: Elevation of Privilege Summary: There are multiple issues in the implementation of the McAfee.TrueKey.Service which can result in privilege escalation through executi...
McAfee True Key (TK) Windows Client Weak Directory Privileges Vulnerability
McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 5.1.230.7 and earlier versions. A...
McAfee True Key (TK) Windows Client Arbitrary Command Execution Vulnerability
McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 5.1.230.7 and earlier versions. A...
McAfee True Key (TK) Windows Client Elevation of Privilege Vulnerability
McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A privilege extraction vulnerability exists in the Microsoft Windows client in McAfee TK 5.1.230.7 and earlier...
CVE-2018-6755
Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key TK 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware...