Vulnerability · Published Sep 9, 2020 · Assigned by trellix

CVE-2020-7323Authentication Protection Bypass vulnerability in ENS for Windows

Medium 6.9

In plain English

A medium-severity improper authentication in Endpoint Security for Windows from McAfee LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)6.9Medium

Exploit odds (30 days)0.3%top 73.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Authentication Protection Bypass vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows physical local users to bypass the Windows lock screen via triggering certain detection events while the computer screen is locked and the McTray.exe is running with elevated privileges. This issue is timing dependent and requires physical access to the machine.

Affected products (as reported)

Vendor	Product	Versions
McAfee LLC	Endpoint Security for Windows	10.7.x – before 10.7.0 September 2020 Update

Weakness: CWE-287 · Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10327 x_refsource_CONFIRM