cnvd - cnvd-2020-24140

cnvd-2020-24140

Vulnerability from cnvd

Title: McAfee Endpoint Security代码问题漏洞

Description:

McAfee Endpoint Security（ENS）是美国迈克菲（McAfee）公司的一套提供智能协作和先进的威胁防御的框架。该框架支持对实时通信的整个威胁防御生命周期进行控制并进行可操作的威胁取证等。

McAfee Endpoint Security存在安全漏洞，攻击者可利该漏洞通过精心设计的输入文件执行任意代码。

Severity: 中

Patch Name: McAfee Endpoint Security代码问题漏洞的补丁

Patch Description:

McAfee Endpoint Security存在安全漏洞，攻击者可利该漏洞通过精心设计的输入文件执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kc.mcafee.com/corporate/index?page=content&id=SB10309

Reference: https://www.auscert.org.au/bulletins/ESB-2020.1318/

Impacted products

Name
['Mcafee Endpoint Security 10.7.', 'Mcafee Endpoint Security 10.6.', 'Mcafee Endpoint Security 10.5.*']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-7275"
    }
  },
  "description": "McAfee Endpoint Security\uff08ENS\uff09\u662f\u7f8e\u56fd\u8fc8\u514b\u83f2\uff08McAfee\uff09\u516c\u53f8\u7684\u4e00\u5957\u63d0\u4f9b\u667a\u80fd\u534f\u4f5c\u548c\u5148\u8fdb\u7684\u5a01\u80c1\u9632\u5fa1\u7684\u6846\u67b6\u3002\u8be5\u6846\u67b6\u652f\u6301\u5bf9\u5b9e\u65f6\u901a\u4fe1\u7684\u6574\u4e2a\u5a01\u80c1\u9632\u5fa1\u751f\u547d\u5468\u671f\u8fdb\u884c\u63a7\u5236\u5e76\u8fdb\u884c\u53ef\u64cd\u4f5c\u7684\u5a01\u80c1\u53d6\u8bc1\u7b49\u3002\n\nMcAfee Endpoint Security\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u8be5\u6f0f\u6d1e\u901a\u8fc7\u7cbe\u5fc3\u8bbe\u8ba1\u7684\u8f93\u5165\u6587\u4ef6\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10309",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-24140",
  "openTime": "2020-04-23",
  "patchDescription": "McAfee Endpoint Security\uff08ENS\uff09\u662f\u7f8e\u56fd\u8fc8\u514b\u83f2\uff08McAfee\uff09\u516c\u53f8\u7684\u4e00\u5957\u63d0\u4f9b\u667a\u80fd\u534f\u4f5c\u548c\u5148\u8fdb\u7684\u5a01\u80c1\u9632\u5fa1\u7684\u6846\u67b6\u3002\u8be5\u6846\u67b6\u652f\u6301\u5bf9\u5b9e\u65f6\u901a\u4fe1\u7684\u6574\u4e2a\u5a01\u80c1\u9632\u5fa1\u751f\u547d\u5468\u671f\u8fdb\u884c\u63a7\u5236\u5e76\u8fdb\u884c\u53ef\u64cd\u4f5c\u7684\u5a01\u80c1\u53d6\u8bc1\u7b49\u3002\r\n\r\nMcAfee Endpoint Security\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u8be5\u6f0f\u6d1e\u901a\u8fc7\u7cbe\u5fc3\u8bbe\u8ba1\u7684\u8f93\u5165\u6587\u4ef6\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002 \u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "McAfee Endpoint Security\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mcafee Endpoint Security 10.7.*",
      "Mcafee Endpoint Security 10.6.*",
      "Mcafee Endpoint Security 10.5.*"
    ]
  },
  "referenceLink": "https://www.auscert.org.au/bulletins/ESB-2020.1318/",
  "serverity": "\u4e2d",
  "submitTime": "2020-04-17",
  "title": "McAfee Endpoint Security\u4ee3\u7801\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2020-7275 (GCVE-0-2020-7275)

Vulnerability from cvelistv5

Published

2020-04-15 11:30

Modified

2024-09-17 00:05

Severity ?

4.8 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-428 - Unquoted Search Path or Element

Summary

Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file.

References

▼	URL	Tags
	https://kc.mcafee.com/corporate/index?page=content&id=SB10309	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	McAfee LLC	McAfee Endpoint Security (ENS)	Version: 10.x < 10.7.0 April 2020 Update

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:25:48.886Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10309"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "McAfee Endpoint Security (ENS)",
          "vendor": "McAfee LLC",
          "versions": [
            {
              "lessThan": "10.7.0 April 2020 Update",
              "status": "affected",
              "version": "10.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2020-04-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-428",
              "description": "CWE-428 Unquoted Search Path or Element",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-15T11:30:23",
        "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
        "shortName": "trellix"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10309"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Unquoted service paths for some McAfee ENS files",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@mcafee.com",
          "DATE_PUBLIC": "2020-04-14T00:00:00.000Z",
          "ID": "CVE-2020-7275",
          "STATE": "PUBLIC",
          "TITLE": "Unquoted service paths for some McAfee ENS files"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "McAfee Endpoint Security (ENS)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "10.x",
                            "version_value": "10.7.0 April 2020 Update"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "McAfee LLC"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Accessing, modifying or executing executable files vulnerability in the uninstaller in McAfee Endpoint Security (ENS) for Windows Prior to 10.7.0 April 2020 Update allows local users to execute arbitrary code via a carefully crafted input file."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-428 Unquoted Search Path or Element"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10309",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10309"
            }
          ]
        },
        "source": {
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
    "assignerShortName": "trellix",
    "cveId": "CVE-2020-7275",
    "datePublished": "2020-04-15T11:30:23.536584Z",
    "dateReserved": "2020-01-21T00:00:00",
    "dateUpdated": "2024-09-17T00:05:29.685Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted