CVE-2020-7278

—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Apr 15, 2020 (Apr 15, 2020)

Modified

Jun 17, 2026

Description

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules not being handled correctly when updating to the February 2020 updates.

Vendors: mcafee
Products: endpoint security
Weakness: CWE-284, CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.