PT-2018-1996 · Microsoft+1 · Windows+1

Published 2018-12-06 · Updated 2019-10-09 · CVE-2018-6757

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee True Key versions 5.1.230.7 and earlier

Description The issue is related to a privilege escalation vulnerability in the Microsoft Windows client of McAfee True Key, which can be exploited by local users to execute arbitrary code via specially crafted malware. This vulnerability is associated with errors in privilege management, allowing an attacker to potentially execute arbitrary code.

Recommendations For versions 5.1.230.7 and earlier, update to a version that contains a fix for this issue, as the current version allows for privilege escalation and arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2018-01612

CVE-2018-6757

Affected Products

Mcafee True Key

Windows

References · 6

• 🔥 https://exploit-db.com/exploits/45961 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6757 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6757 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01612 · Security Note
• http://service.mcafee.com/FAQDocument.aspx?&id=TS102872 · Note
• http://service.mcafee.com/FAQDocument.aspx?&id=TS102872 · Note