PT-2020-19509 · Mcafee · Mcafee Endpoint Security (Ens) For Windows

Published 2020-04-01 · Updated 2022-06-02 · CVE-2020-7263

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) for Windows (affected versions not specified)

Description The issue is related to an improper access control vulnerability in ESconfigTool.exe, which allows a local administrator to alter the ENS configuration, potentially disabling all protection offered by ENS. This is due to the insecure implementation of encryption for configuration export and import.

Recommendations For all current versions of McAfee Endpoint Security (ENS) for Windows, consider restricting access to the ESconfigTool.exe to prevent unauthorized configuration changes until a proper fix is implemented. As a temporary workaround, limit the privileges of local administrators to minimize the risk of exploitation. Avoid using the insecurely implemented encryption for configuration export and import in ESconfigTool.exe until the issue is resolved.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

CWE-264

Related Identifiers

CVE-2020-7263

Affected Products

Mcafee Endpoint Security (Ens) For Windows

References · 4

• https://osv.dev/vulnerability/CVE-2020-7263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7263 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10314 · Note
• https://t.me/cvenotify/2309 · Telegram Post