CVE-2020-7253: Improper access control vulnerability in McAfee Agent
Published Mar 12, 2020
·Updated
Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.
Affected Software
2 affected components
McAfee Agent>=5.5.0<5.5.4
McAfee Agent>=5.6.0<5.6.4
Event History
Mar 12, 2020
CVE Published
via MITRE·10:55 AM
Data Sourced
via MITRE·10:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-7253.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.'
3
What is the severity of CVE-2020-7253?
The severity of CVE-2020-7253 is medium with a CVSS score of 4.4.
4
Which software versions are affected by CVE-2020-7253?
McAfee Agent versions prior to 5.6.4 and between 5.5.0 to 5.5.4 are affected by CVE-2020-7253.
5
How can the vulnerability be fixed?
To fix the vulnerability, update McAfee Agent to version 5.6.4 or later.