CVE-2020-7273: Autorun registry bypass
Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7273?
CVE-2020-7273 is a vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows prior to version 10.7.0 April 2020 Update.
What is the severity of CVE-2020-7273?
The severity of CVE-2020-7273 is medium with a CVSS score of 5.5.
Which McAfee Endpoint Security versions are affected by CVE-2020-7273?
McAfee Endpoint Security versions 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5, and 10.6.0 are affected by CVE-2020-7273.
How does CVE-2020-7273 impact local users?
CVE-2020-7273 allows local users to delete or rename programs in the autorun key via manipulation of some parameters.
Is there a fix available for CVE-2020-7273?
Yes, a fix for CVE-2020-7273 is available in McAfee Endpoint Security version 10.7.0 April 2020 Update.