PT-2020-19550 · Microsoft+1 · Windows+1

Published 2020-09-09 · Updated 2020-09-11 · CVE-2020-7320

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) for Windows versions prior to 10.7.0 September 2020 Update

Description A Protection Mechanism Failure issue allows a local administrator to temporarily reduce the detection capability, enabling otherwise detected malware to run by stopping certain Microsoft services.

Recommendations For versions prior to 10.7.0 September 2020 Update, update to the 10.7.0 September 2020 Update or later to resolve the issue. As a temporary workaround, consider restricting the ability to stop certain Microsoft services to minimize the risk of exploitation.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2020-7320

Affected Products

Mcafee Endpoint Security

Windows

References · 3

• https://osv.dev/vulnerability/CVE-2020-7320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7320 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10327 · Note