VulnerabilityModified

CVE-2020-7315

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.

MEDIUM 6.7EPSS 0.47%

Does this matter?

Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own.

Description

DLL Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.6.6 allows local users to execute arbitrary code via careful placement of a malicious DLL.

CVSS 3.1: 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.47% probability · 39th percentile
CISA KEV: Not listed
Weakness: CWE-426
Affected: mcafee/mcafee agent
Source: trellixpsirt@trellix.com

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10325
https://kc.mcafee.com/corporate/index?page=content&id=SB10325

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.