Privilege escalation in Mcafee Total Protection
CVE-2020-7330
Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables
Vulnerability class: Privilege Escalation
EPSS: 0.003 (19.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Mcafee Total_protection
- Mcafee,llc Mcafee Total Protection (Mtp) Trial — versions unspecified
Weakness classification (CWE)
References
- trellixpsirt@trellix.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2020-7330?
- CVE-2020-7330 is a high-severity vulnerability in Mcafee Total Protection, classified under Improper Privilege Management. CVSS score: 7.5/10. Published 2020-10-14.
- How severe is CVE-2020-7330?
- High severity. CVSS v3 base score is 7.5 out of 10.