Skip to content
CVE Tracker
Back

CVE-2020-7253

Improper access control vulnerability in McAfee Agent

Medium5.7EPSS 0.24%
Published
Updated
Reserved
Assigned by
trellix

Description

Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility.

Scores

CVSS scores of CVE-2020-7253, by who scored it
Scored byCVSSScoreVector
trellixCNA (assigner)3.1Medium5.7CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
NVDNVD · Modified3.1Medium4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
0.24% · top 85% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.7.

Weakness

Affected products

  • McAfee, LLC · McAfee Agent (MA)

    • affected 5.6.x – < 5.6.4

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .