PT-2020-19517 · Mcafee · Mcafee Endpoint Security (Ens) For Windows

Published 2020-04-15 · Updated 2020-04-21 · CVE-2020-7275

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) for Windows versions prior to 10.7.0 April 2020 Update

Description The issue allows local users to execute arbitrary code via a carefully crafted input file, due to a vulnerability in accessing, modifying, or executing executable files in the uninstaller.

Recommendations For versions prior to 10.7.0 April 2020 Update, update to version 10.7.0 April 2020 Update or later to resolve the issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-7275

Affected Products

Mcafee Endpoint Security (Ens) For Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-7275 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7275 · Vendor Advisory
• https://t.me/cvenotify/2760 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10309 · Note