CVE-2020-7320mediumCWE-693

CVE-2020-7320: medium-severity vulnerability in McAfee LLC Endpoint Security for Windows

Protection Mechanism Failure in ENS for Windows

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.3%
Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L
Affected products
McAfee LLC · Endpoint Security for Windows
Related CVEs — McAfee LLC Endpoint Security for Windows

In the same product, most dangerous first.

CVE-2020-7319HIGHImproper Access Control Vulnerability in ENS for WindowsEPSS 0.4%CVE-2020-7323MEDIUMAuthentication Protection Bypass vulnerability in ENS for WindowsEPSS 0.3%CVE-2020-7322MEDIUMExposure of Sensitive Information in ENS for WindowsEPSS 0.2%