CVE-2020-7263: ENS configuration can be edited by attacker with local administrator permissions
Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7263?
The severity of CVE-2020-7263 is medium.
How does CVE-2020-7263 affect McAfee Endpoint Security?
CVE-2020-7263 affects all current versions of McAfee Endpoint Security for Windows.
What is the impact of CVE-2020-7263?
CVE-2020-7263 allows a local administrator to alter the ENS configuration, including disabling all protection offered by ENS.
How can I fix CVE-2020-7263?
To fix CVE-2020-7263, it is recommended to update McAfee Endpoint Security to a patched version as soon as it becomes available.
Where can I find more information about CVE-2020-7263?
You can find more information about CVE-2020-7263 on the McAfee support website: https://kc.mcafee.com/corporate/index?page=content&id=SB10314