What is CVE-2020-7278?

CVE-2020-7278 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Improper Access Control. CVSS score: 7.4/10. Published 2020-04-15.

How severe is CVE-2020-7278?

High severity. CVSS v3 base score is 7.4 out of 10.

Auth bypass in Mcafee Endpoint_security

CVE-2020-7278

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users t…

EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L.

Affected products

Mcafee Endpoint_security — versions 10.5.0, 10.5.1, 10.5.2
Mcafee Llc Endpoint Security (Ens) — versions 10.7.x, 10.6.x

Weakness classification (CWE)

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2020-7278?: CVE-2020-7278 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Improper Access Control. CVSS score: 7.4/10. Published 2020-04-15.
How severe is CVE-2020-7278?: High severity. CVSS v3 base score is 7.4 out of 10.