Lucene search

TrellixCVELIST:CVE-2020-7327

HistoryOct 15, 2020 - 9:50 a.m.

CVE-2020-7327 McAfee MVEDR - Improperly implemented security check

2020-10-1509:50:13

CWE-290

trellix

www.cve.org

cve-2020-7327

mcafee

mvedr

security check

windows service

local administrators

malicious code

trust component

vulnerability

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

EPSS

Percentile

12.6%

JSON

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing open rather than closed

CNA Affected

[
  {
    "product": "McAfee MVISION Endpoint Detection and Response",
    "vendor": "McAfee,LLC",
    "versions": [
      {
        "lessThan": "3.2.0",
        "status": "affected",
        "version": "3.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10331

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-7327