VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 1, 2020· Updated Jun 17, 2026

CVE-2020-7263

CVE-2020-7263

Description

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.

Affected products

11
  • McAfee/Endpoint Security9 versions
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*+ 8 more
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.7.0:*:*:*:*:windows:*:*
  • McAfee/Endpoint Security (ENS) for Windowsllm-fuzzy
    Range: all current versions
  • McAfee, LLC/Endpoint Security (ENS) for Windowv5
    Range: 10.7.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.