CVE-2020-7331 Unquoted service executable path in McAfee Endpoint Security (ENS)
HighCVSS 7.8
EPSS 0.42%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee endpoint security | < 10.6.1 | 10.6.1 |
| McAfee Endpoint Security (ENS) | = prior to 10.7.0 November 2020 Update | No fix listed |
References
- kc.mcafee.com broken-link