CVE-2020-7326: McAfee MAR - Improperly implemented security check
Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-7326?
CVE-2020-7326 is a vulnerability in McAfee Active Response (MAR) prior to 2.4.4 that allows local administrators to execute malicious code by stopping a core Windows service.
How severe is CVE-2020-7326?
CVE-2020-7326 has a severity keyword of medium and a severity value of 6.7.
How can local administrators exploit CVE-2020-7326?
Local administrators can exploit CVE-2020-7326 by stopping a core Windows service, which leaves the McAfee core trust component in an inconsistent state.
Which version of McAfee Active Response is affected by CVE-2020-7326?
McAfee Active Response versions prior to 2.4.4 are affected by CVE-2020-7326.
How can I fix CVE-2020-7326?
To fix CVE-2020-7326, upgrade McAfee Active Response to version 2.4.4 or higher.