← back
CVE-2020-7293

Web Gateway (MWG) - Privilege Escalation vulnerability

CVSS 9 CRITICALEPSS 0.7%CWE-287
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9EPSS 0.7%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
15 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →