Skip to main content

Mvision Endpoint CVE-2020-7285

HIGH
Improper Handling of Insufficient Privileges (CWE-274)
2020-05-08 trellixpsirt@trellix.com
Privilege Escalation Mvision Endpoint
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 08, 2020 - 13:15 nvd
HIGH 7.8

DescriptionNVD

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to.

AnalysisAI

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-274. Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.5.0.94 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Affected products include: Mcafee Mvision Endpoint. Version information: prior to 20.5.0.94.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Mvision Endpoint

View all
CVE-2020-7325 HIGH
7.8 Sep 09

Privilege Escalation vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to access files wh
CVE-2020-7329 HIGH
7.2 Nov 11

Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote a
CVE-2020-7328 HIGH
7.2 Nov 11

External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attack
CVE-2020-7324 MEDIUM
6.1 Sep 09

Improper Access Control vulnerability in McAfee MVISION Endpoint prior to 20.9 Update allows local users to bypass secur
CVE-2019-3584 MEDIUM
6.0 Jan 23

Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.1

Same weakness CWE-274 – Improper Handling of Insufficient Privileges

View all
CVE-2023-39375 CRITICAL
9.8
CVE-2024-0105 HIGH
8.9
CVE-2023-35928 HIGH
8.8
CVE-2020-7283 HIGH
8.8
CVE-2024-0106 HIGH
8.7
CVE-2020-7267 HIGH
8.4
CVE-2020-7266 HIGH
8.4
CVE-2020-7265 HIGH
8.4

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2020-7285 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy