PT-2020-19501 · Mcafee · Mcafee Agent

Published 2020-03-12 · Updated 2020-03-17 · CVE-2020-7253

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Agent (MA) versions prior to 5.6.4

Description The issue is related to an improper access control vulnerability in the masvc.exe component of McAfee Agent. This vulnerability allows local users with administrator privileges to disable self-protection using a command-line utility provided by McAfee.

Recommendations For McAfee Agent (MA) versions prior to 5.6.4, update to version 5.6.4 or later to resolve the issue.

Fix

Improper Access Control

RCE

Weakness Enumeration

CWE-284

CWE-20

Related Identifiers

CVE-2020-7253

Affected Products

Mcafee Agent

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-7253 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7253 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10312 · Note
• https://t.me/cvenotify/1539 · Telegram Post