What’s Vulnerable › Vulnerabilities

CVE-2020-7251: ESConfig Tool able to edit configuration for newer version

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-14 · updated 2026-06-17
• Weakness: CWE-358

Description

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Affected products

• McAfee LLC McAfee Endpoint Security (ENS): before 10.6.1 — fixed in 10.6.1

How to fix

Upgrade to a fixed version: McAfee LLC McAfee Endpoint Security (ENS) 10.6.1. Check the vendor advisory for mitigations.

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10299
• https://kc.mcafee.com/corporate/index?page=content&id=SB10299

Get alerted when CVE-2020-7251 or the next vulnerability affects your stack