CVE-2020-7326

published 2020-10-15

CVE-2020-7326: Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a…

Priority P4 27 medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Improperly implemented security check in McAfee Active Response (MAR) prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mcafee	active_response	< 2.4.4	2.4.4
mcafee_llc	mcafee_active_response	>= 2.x < 2.4.4	2.4.4

CVSS provenance

nvd v3.1 6.7 MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-290