PT-2018-17713 · Mcafee · Mcafee Drive Encryption

Published 2018-07-27 · Updated 2023-01-27 · CVE-2018-6686

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee Drive Encryption (MDE) versions 7.1.0 and above

Description The issue allows physically proximate attackers to bypass local security protection via a specific set of circumstances. This is related to an Authentication Bypass vulnerability in TPM autoboot.

Recommendations For McAfee Drive Encryption (MDE) versions 7.1.0 and above, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-6686

Affected Products

Mcafee Drive Encryption

References · 4

• https://osv.dev/vulnerability/CVE-2018-6686 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6686 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10242 · Note
• https://t.me/cvenotify/42982 · Telegram Post