VYPR
← All advisories
High severity7.4NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-7278

CVE-2020-7278

Description

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules not being handled correctly when updating to the February 2020 updates.

Affected products

9
  • McAfee/Endpoint Security8 versions
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*+ 7 more
    • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
    • (no CPE)range: <10.7.0 April 2020 and <10.6.1 April 2020
  • McAfee LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.7.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.