CVE-2020-7323: medium-severity vulnerability in McAfee LLC Endpoint Security for Windows
Authentication Protection Bypass vulnerability in ENS for Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.3%
Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine.
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L
Affected products
McAfee LLC · Endpoint Security for WindowsRelated CVEs — McAfee LLC Endpoint Security for Windows
In the same product, most dangerous first.