What is CVE-2020-7252?

CVE-2020-7252 is a medium-severity vulnerability in Mcafee Data_exchange_layer, classified under CWE-250. CVSS score: 4.2/10. Published 2020-02-17.

How severe is CVE-2020-7252?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Vulnerability in Mcafee Data_exchange_layer

CVE-2020-7252

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

EPSS: 0.005 (39.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H.

Affected products

Mcafee Data_exchange_layer
Mcafee, Llc Data Exchange Layer (Dxl) Broker — versions 6.0.x, 5.0.x
Microsoft Windows

Weakness classification (CWE)

CWE-250
CWE-428 — Unquoted Search Path or Element

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2020-7252?: CVE-2020-7252 is a medium-severity vulnerability in Mcafee Data_exchange_layer, classified under CWE-250. CVSS score: 4.2/10. Published 2020-02-17.
How severe is CVE-2020-7252?: Medium severity. CVSS v3 base score is 4.2 out of 10.