CVE-2019-3653mediumCWE-284

CVE-2019-3653: medium-severity vulnerability in McAfee Endpoint Security (ENS)

ESConfig Tool access not controlled

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.6epss 0.2%
Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
Affected products
McAfee, LLC · McAfee Endpoint Security (ENS)
Related CVEs — McAfee Endpoint Security (ENS)

In the same product, most dangerous first.

CVE-2019-3586HIGHMcAfee Endpoint Security firewall not always acting on GTI lookup resultsEPSS 0.8%CVE-2020-7331HIGHUnquoted service executable path in McAfee Endpoint Security (ENS)EPSS 0.4%CVE-2019-3582HIGHMcAfee Endpoint Security updates fix a privilege escalation vulnerabilityEPSS 0.4%CVE-2019-3652MEDIUMENS code injection in EPSetup.exeEPSS 0.3%