Vulnerability Details CVE-2020-7343
Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.5%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
Products affected by CVE-2020-7343
-
-
cpe:2.3:a:mcafee:agent:5.0.0
-
cpe:2.3:a:mcafee:agent:5.0.1
-
cpe:2.3:a:mcafee:agent:5.0.2
-
cpe:2.3:a:mcafee:agent:5.0.3
-
cpe:2.3:a:mcafee:agent:5.0.4
-
cpe:2.3:a:mcafee:agent:5.0.5
-
cpe:2.3:a:mcafee:agent:5.0.6
-
cpe:2.3:a:mcafee:agent:5.5.0
-
cpe:2.3:a:mcafee:agent:5.5.1
-
cpe:2.3:a:mcafee:agent:5.5.2
-
cpe:2.3:a:mcafee:agent:5.5.3
-
cpe:2.3:a:mcafee:agent:5.6.0
-
cpe:2.3:a:mcafee:agent:5.6.1