CVE-2012-4599

critical Trellix
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
5.5%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: August 22, 2012 (5013 days ago)
Last Modified: April 29, 2026
Vendor: Trellix
Source: NVD

Description

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

CWE

CWE-287

Affected Products

mcafee smartfilter administration

References

🔗 kc.mcafee.com 🔗 kc.mcafee.com