VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Feb 14, 2020· Updated Jun 17, 2026

CVE-2020-7251

CVE-2020-7251

Description

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Affected products

3
  • McAfee/Endpoint Security2 versions
    cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*range: <10.6.1
    • (no CPE)range: <10.6.1 February 2020 Update
  • McAfee, LLC/Mcafee Endpoint Security (ENS)v5
    Range: 10.6.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.