CVE-2020-7343 - CVE House
Back to Database
Status published Medium CVE-2020-7343

Improper Authorization vulnerability in MA

Vulnerability Description

Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7343

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • McAfee credits Andrew Hess (any1) for responsibly reporting this flaw.

References

More from McAfee, LLC

View All →
CVE-2021-23879
Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ...
Medium 6.7
CVE-2020-7337
Incorrect Permission Assignment for Critical Resource
Medium 6.5
CVE-2020-7331
Unquoted service executable path in McAfee Endpoint Security (ENS)
High 7.8
CVE-2020-7329
Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension
High 7.2
CVE-2020-7328
Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension
High 7.2

Affected Vendor

McAfee, LLC

View all reports →

Affected Software

McAfee Agent
Vulnerable Versions:
5.7.x

Timeline

Official Publish: January 18th, 2021
Last Modified: September 17th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-862

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1078 Valid Accounts
Persistence
T1531 Account Access Removal
Impact