CVE-2020-7251mediumCWE-358

CVE-2020-7251: medium-severity vulnerability in Mcafee Endpoint Security (ENS)

ESConfig Tool able to edit configuration for newer version

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.2%
Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
Affected products
McAfee, LLC · Mcafee Endpoint Security (ENS)