VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-7273

CVE-2020-7273

Description

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.

Affected products

9
  • McAfee/Endpoint Security7 versions
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*+ 6 more
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
  • McAfee/Endpoint Security (ENS) for Windowsllm-fuzzy
    Range: <10.7.0 April 2020 Update
  • McAfee LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.