Vulnerability Description
Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.
CVSS Score
7.8
HIGH
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | True Key | <= 5.1.230.7 |
| Microsoft | Windows | - |
References
- http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
- https://www.exploit-db.com/exploits/45961/
- http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
- https://www.exploit-db.com/exploits/45961/
FAQ
What is CVE-2018-6756?
CVE-2018-6756 is a vulnerability with a CVSS score of 7.8 (HIGH). Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.
How severe is CVE-2018-6756?
CVE-2018-6756 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-6756?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee True Key, Microsoft Windows.