VIR Vulnerability Intelligence Relay

CVE-2012-4599

critical
Published 2012-08-22 · Modified 2026-04-29
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://kc.mcafee.com/corporate/index?page=content&id=SB10029

Application impact
VendorProductVersionsFixed
mcafeesmartfilter_administration{"endIncluding":"4.2.1"}

References

CWEs

CWE-287

Verify integrity in audit chain (admin only). AS-IS.