CVE-2020-7327CWE-290

McAfee MVEDR - Improperly implemented security check

Medium · published October 15, 2020

CVSS v3.1
6.0
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing open rather than closed

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.3th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2020-10-15T09:50Z
EPSS history
Timeline
  • 15 OCT 09:50Z
    McAfee MVEDR - Improperly implemented security check
    cvelistv5