CVE-2016-8009 — Improper Privilege Management in Intel Mcafee Application Control

CWE-2643 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 80.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Intel Mcafee Application ControlMcafee Application Control
Timeline
PublishedMar 14
Latest updateMay 17

Description

Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unexpected behavior, or potentially unauthorized code execution via an unauthorized use of IOCTL call.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5intel/mcafee_application_control7.0 and 6.x versions
▶NVDmcafee/application_control7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-2gqq-rvvg-79fr: Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7↗2022-05-17
▶
CVEList
CVE-2016-8009: Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7↗2017-03-14
▶
CVE-2016-8009 — Improper Privilege Management in Intel | cvebase