What is CVE-2020-7336?

CVE-2020-7336 is a medium-severity vulnerability in Mcafee Network_security_management, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.6/10. Published 2021-01-05.

How severe is CVE-2020-7336?

Medium severity. CVSS v3 base score is 6.6 out of 10.

CSRF in Mcafee Network_security_management

CVE-2020-7336

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (41.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H.

Affected products

Mcafee Network_security_management
Mcafee Network Security Management (Nsm) — versions NSM 10.x, NSM 9.x

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

trellixpsirt@trellix.com (x_refsource_MISC, Broken Link)

Frequently asked questions

What is CVE-2020-7336?: CVE-2020-7336 is a medium-severity vulnerability in Mcafee Network_security_management, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.6/10. Published 2021-01-05.
How severe is CVE-2020-7336?: Medium severity. CVSS v3 base score is 6.6 out of 10.