High severity · published Jun 10, 2020
CVE-2020-7279
DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows…
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HI
Host Intrusion Prevention · Mcafee
8.0.0; 8.0.0; 8.0.0; 8.0.0; 8.0.0; 8.0.0; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-7279
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-7279
kc.mcafee.com
https://kc.mcafee.com/corporate/index?page=content&id=SB10320
More from Host Intrusion Prevention
5.1
CVE-2016-3984
The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.2 Hotfix 1110392 (5.0.2.333), Data Exchange Layer 2.x (DXL)…
4.4
CVE-2017-4028
Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into…