CVE-2020-7261mediumCWE-119

CVE-2020-7261: medium-severity vulnerability in McAfee Endpoint Security (ENS)

Buffer overwrite in ENS allowed to bypass AMSI protection

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.3%
Buffer Overflow via Environment Variables vulnerability in AMSI component in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to disable Endpoint Security via a carefully crafted user input.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
Affected products
McAfee LLC · McAfee Endpoint Security (ENS)
Related CVEs — McAfee Endpoint Security (ENS)

In the same product, most dangerous first.

CVE-2020-7278HIGHMcAfee firewall rules not enforced correctlyEPSS 0.6%CVE-2020-7250HIGHENS symbolic link log file manipulation vulnerabilityEPSS 0.4%CVE-2020-7275MEDIUMUnquoted service paths for some McAfee ENS filesEPSS 0.3%CVE-2020-7276MEDIUMUnrestricted Policy Management using MfeUpgradeTool.exeEPSS 0.3%CVE-2020-7277MEDIUMMcAfee processes not protectedEPSS 0.3%CVE-2020-7257HIGHPrivilege Escalation vulnerability through Symbolic links in ENSEPSS 0.3%