What is CVE-2014-9920?

CVE-2014-9920 is a medium-severity vulnerability in Intel Mcafee Application Control (Mac), classified under Improper Access Control. CVSS score: 5.9/10. Published 2017-03-14.

How severe is CVE-2014-9920?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Intel Mcafee Application Control (Mac)

CVE-2014-9920

Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, a…

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Intel Mcafee Application Control (Mac) — versions 6.0.0 before hotfix 9726, 6.0.1 before hotfix 9068, 6.1.0 before hotfix 692, 6.1.1 before hotfix 399, 6.1.2 before hotfix 426, and 6.1.3 before hotfix 357 and earlier
Mcafee Application_control — versions 6.0.0, 6.0.1, 6.1.0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2014-9920?: CVE-2014-9920 is a medium-severity vulnerability in Intel Mcafee Application Control (Mac), classified under Improper Access Control. CVSS score: 5.9/10. Published 2017-03-14.
How severe is CVE-2014-9920?: Medium severity. CVSS v3 base score is 5.9 out of 10.