CVE-2020-7263

—

CVSS 3.1

6.7 medium

EPSS

<1%p6

Published

Apr 1, 2020 (Apr 1, 2020)

Modified

Jun 17, 2026

Description

Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.

Vendors: mcafee
Products: endpoint security
Weakness: CWE-264, CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.