VULNERABILITY INTELLIGENCE
CVE-2020-7273
CVSS score6.7 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2020-04-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:H
Description
Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters.
Weakness classification
- trellixpsirt@trellix.com: CWE-269
- nvd@nist.gov: CWE-269