CVE-2020-7251

5.5 mediumEPSS 0.2%

Medium (5.5) in mcafee endpoint security. EPSS 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-358
Published: 2020-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:endpoint_security

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10299
https://kc.mcafee.com/corporate/index?page=content&id=SB10299

Check your stack JSON