CVE-2020-7263: ENS configuration can be edited by attacker with local administrator permissions
First published: Wed Apr 01 2020(Updated: )
Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Endpoint Security | =10.5.0 | |
| Mcafee Endpoint Security | =10.5.1 | |
| Mcafee Endpoint Security | =10.5.2 | |
| Mcafee Endpoint Security | =10.5.3 | |
| Mcafee Endpoint Security | =10.5.4 | |
| Mcafee Endpoint Security | =10.5.5 | |
| Mcafee Endpoint Security | =10.6.0 | |
| Mcafee Endpoint Security | =10.6.1 | |
| Mcafee Endpoint Security | =10.7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-7263?
The severity of CVE-2020-7263 is medium.
How does CVE-2020-7263 affect McAfee Endpoint Security?
CVE-2020-7263 affects all current versions of McAfee Endpoint Security for Windows.
What is the impact of CVE-2020-7263?
CVE-2020-7263 allows a local administrator to alter the ENS configuration, including disabling all protection offered by ENS.
How can I fix CVE-2020-7263?
To fix CVE-2020-7263, it is recommended to update McAfee Endpoint Security to a patched version as soon as it becomes available.
Where can I find more information about CVE-2020-7263?
You can find more information about CVE-2020-7263 on the McAfee support website: https://kc.mcafee.com/corporate/index?page=content&id=SB10314
- collector/nvd-index
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/remedy
- agent/description
- agent/event
- vendor/mcafee
- canonical/mcafee endpoint security
- version/mcafee endpoint security/10.5.0
- version/mcafee endpoint security/10.5.1
- version/mcafee endpoint security/10.5.2
- version/mcafee endpoint security/10.5.3
- version/mcafee endpoint security/10.5.4
- version/mcafee endpoint security/10.5.5
- version/mcafee endpoint security/10.6.0
- version/mcafee endpoint security/10.6.1
- version/mcafee endpoint security/10.7.0