CVE-2020-7331: falha de alta gravidade em McAfee Endpoint Security (ENS)
Unquoted service executable path in McAfee Endpoint Security (ENS)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.4%
Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
McAfee, LLC · McAfee Endpoint Security (ENS)CVEs relacionadas — McAfee Endpoint Security (ENS)
No mesmo produto, das mais perigosas para as menos.
CVE-2019-3586HIGHMcAfee Endpoint Security firewall not always acting on GTI lookup resultsEPSS 0.8%CVE-2019-3582HIGHMcAfee Endpoint Security updates fix a privilege escalation vulnerabilityEPSS 0.4%CVE-2019-3652MEDIUMENS code injection in EPSetup.exeEPSS 0.3%CVE-2019-3653MEDIUMESConfig Tool access not controlledEPSS 0.2%