CVE-2020-7331

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

Score

CVSS 3.1 7.8 High

Status

Modified - trellixpsirt@trellix.com

Published

2020-11-12

Last modified

2024-09-16

Weaknesses

CWE-428

Affected products

• Endpoint Security (Mcafee)
• Mcafee Endpoint Security Ens (Mcafee Llc)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10335