Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7331 EUVD-2020-28458GHSA-w44x-f7wx-v7m6

Unquoted service executable path in McAfee Endpoint Security (ENS)

Published Nov 12, 2020 · Updated Sep 16, 2024 · Assigned by trellix

Description

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.

Affected products

VendorProductAffectedFixed
McAfee McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update —

References