CVE-2020-7278CWE-284

McAfee firewall rules not enforced correctly

High · published April 15, 2020

CVSS v3.1
7.4
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules not being handled correctly when updating to the February 2020 updates.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00636 · 49.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-04-15T09:25Z
EPSS history
Timeline
  • 15 APR 09:25Z
    McAfee firewall rules not enforced correctly
    cvelistv5