PT-2018-17719 · Mcafee · Mcafee True Key

Name of the Vulnerable Software and Affected Versions: McAfee True Key versions prior to 5.1.165 Description: A DLL Search Order Hijacking issue allows local users to execute arbitrary code via specially crafted malware. Recommendations: For versions prior to 5.1.165, update to version 5.1.165 or...

PT-2018-17711 · Mcafee · Mcafee True Key

Name of the Vulnerable Software and Affected Versions: McAfee True Key versions 4.0.0.0 and earlier Description: The issue allows local users to expose confidential data via a crafted web site, potentially leading to the disclosure of sensitive information. Recommendations: For versions 4.0.0.0 a...

McAfee Application and Change Control (MACC) Arbitrary Code Execution Vulnerability

McAfee Application and Change Control MACC is a suite of program control software from the American company McAfee. The software protects enterprise servers and endpoints from unauthorized applications and malware threats by using a dynamic trust model. An arbitrary code execution vulnerability...

ENSLTP Arbitrary File Deletion Vulnerability

ENSLTP is a security endpoint for Linux defense from the American company McAfee McAfee. An elevation of privilege vulnerability exists in ENSLTP version 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. An attacker can exploit the vulnerability to elevate privileges and thus delete arbitrar...

Default credentials

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

Code injection

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2018-6690

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2018-6690

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2017-3912

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

CVE-2018-6690 McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control MACC 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system...

CVE-2017-3912

The vulnerability CVE-2017-3912 affects McAfee Application and Change Control (MACC) versions 6.2.0 and 7.0.1. A local attacker can bypass password authentication in the software’s password management feature and, via a command-line utility, execute arbitrary commands on the affected system. The ...

CVE-2018-6690

Summary of CVE-2018-6690 (MACC): McAfee Application and Change Control (MACC) on Windows clients is affected by an improper access control flaw that enables an authenticated user to trigger execution of arbitrary code when transferring files from an external system via USB. The vulnerability affe...

CVE-2017-3912 McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypass

Bypassing password security vulnerability in McAfee Application and Change Control MACC 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility...

PT-2018-17715 · Mcafee +1 · Mcafee Application/Change Control +1

Name of the Vulnerable Software and Affected Versions: McAfee Application and Change Control MACC versions 8.0.0 Hotfix 4 and earlier Description: The issue allows authenticated users to execute arbitrary code via file transfer from an external system. This is due to a vulnerability in accessing,...

Security Vulnerability in Smart Electric Outlets

A security vulnerability in Belkin's Wemo Insight "smartplugs" allows hackers to not only take over the plug, but use it as a jumping-off point to attack everything else on the network. From the Register: The bug underscores the primary risk posed by IoT devices and connected appliances. Because...

McAfee Night Dragon Report (Update A)

Overview McAfee has published a white paper titled “Global Energy Cyberattacks: Night Dragon,”McAfee, http://www.mcafee.com/us/resources/white-papers/wp-global-energy-cyberattacks-night-dragon.pdf, accessed February 10, 2011. which describes advanced persistent threat activity designed to obtain...

John McAfee backed Bitfi wallet pwned again

By Uzair Amir The presumably unhackable Bitfi wallet backed by John McAfee has released a statement announcing that the unhackable tag will be removed from their marketing materials. The step comes after the device’s security was compromised by a Twitter user under the name @spudowiar. The...

Hacking the Bitfi Part 3: The device with no storage

TL;DR? Here’s proof that the Bitfi has storage and that it’s been rooted. -The Bitfi boots at 20 seconds. We’re not disclosing the method yet, as there is plenty more work to be done here. If you’ve been keeping an eye on Twitter, no doubt you’ve seen the unravelling mess that is the security of...

McAfee Drive Encryption 7.1 < 7.1.3 HF1241165 or 7.2.x < 7.2.6 Authentication Bypass vulnerability

The remote host is running a version of McAfee Drive Encryption that is 7.1 7.1.3 HF1241165 or 7.2.x 7.2.6 that is affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111531; scriptversion"1.5";...