CVE-2020-7316CWE-428

File and Removable Media Protection update fixes one vulnerability

Medium · published October 7, 2020

CVSS v3.1
6.6
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2020-10-07T18:40Z
EPSS history
Timeline
  • 07 OCT 18:40Z
    File and Removable Media Protection update fixes one vulnerability
    cvelistv5