VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Feb 17, 2020· Updated Jun 17, 2026

CVE-2020-7252

CVE-2020-7252

Description

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

Affected products

3
  • McAfee/Data eXchange Layer (DXL) Framework2 versions
    cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*range: <=6.0.0
    • (no CPE)range: <=6.0.0
  • McAfee, LLC/Data Exchange Layer (DXL) Brokerv5
    Range: 6.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.