McAfee Application Control (MAC) - Whitelist bypass using a hard drive solidified by MACC

published 2018-09-18 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-18437

cvss: 6.1; version 3.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 18%
public exploits: 0; none known

Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-18-345-01 updated 2018-12-11 cvss 7.1

ICSA-18-345-01 McAfee SINAMICS PERFECT HARMONY GH180

Siemens SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32 with option A30 (HMIs 12 inch or larger), MLFB 6SR42 with option A30 (HMIs 12 inch or larger), MLFB 6SR52 with option A30 (HMIs 12 inch or larger), MLFB 6SR325 (High Availability)
affected: vendor fix, mitigation kc.mcafee.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.26% chance of exploitation in the next 30 days, higher than 18% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CNA	3.0	6.1	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
NVD	3.1	7.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD	2.0	3.6	AV:L/AC:L/Au:N/C:P/I:P/A:N

Affected products

McAfee McAfee Application Control (MAC)

Classification

Weakness

CWE-346 Origin Validation Error

References

Sources

CVE List CVE-2018-6690
NVD CVE-2018-6690

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary