CVE-2018-6668

Name of the Vulnerable Software and Affected Versions McAfee Application Control / Change Control version 7.0.1 and earlier

Description The issue is related to a whitelist bypass, which can lead to execution bypass. This can be achieved, for example, through simple DLLs and interpreters such as PowerShell. The vulnerability is associated with errors in the implementation of execution restriction policies, allowing an attacker to execute arbitrary commands using the command line.

Recommendations For McAfee Application Control / Change Control version 7.0.1 and earlier, consider restricting the use of interpreters like PowerShell to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.