Medium severity · published Aug 21, 2020
CVE-2020-7310
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write…
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
Required
Confidentiality
None
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TP
Total Protection · Mcafee
before 4.0.161.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-7310
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-7310
service.mcafee.com
http://service.mcafee.com/FAQDocument.aspx?&id=TS103067
More from Total Protection
7.8
CVE-2021-23874
McAfee Total Protection (MTP) privilege escalation vulnerability
8.8
CVE-2020-7330
Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with…
8.8
CVE-2020-7283
Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they…
8.4
CVE-2020-7298
Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific…
8.2
CVE-2019-3617
Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files