CVE-2020-7284
Network Security Management (NSM) - Exposure of Sensitive Information
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.6EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Jul 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
McAfee · Network Security Management (NSM)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →