CVE-2020-7281
Privilege Escalation vulnerability in McAfee Total Protection (MTP)
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Jul 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Affected products
McAfee,LLC · McAfee Total Protection (MTP)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →