Medium severity · published Jul 3, 2020
CVE-2020-7282
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating…
6.3
CVSS
0.3%
EPSS
No
On KEV
Description
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious script or program on the target machine.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TP
Total Protection · Mcafee
before 16.0.r26 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-7282
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-7282
service.mcafee.com
https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103062
More from Total Protection
7.8
CVE-2021-23874
McAfee Total Protection (MTP) privilege escalation vulnerability
8.8
CVE-2020-7330
Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with…
8.8
CVE-2020-7283
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they…
8.4
CVE-2020-7298
Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific…
8.2
CVE-2019-3617
Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files