CVE-2020-7279

mcafee host intrusion prevention

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-7279

Katalog CVE

CVSS 7.8 · High EPSS 0,42%

Kerentanan Untrusted Search Path pada mcafee host intrusion prevention. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

DLL Search Order Hijacking Vulnerability in the installer component of McAfee Host Intrusion Prevention System (Host IPS) for Windows prior to 8.0.0 Patch 15 Update allows attackers with local access to execute arbitrary code via execution from a compromised folder.

Rincian

Terbit di NVD
10 Juni 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-426: Untrusted Search Path
EPSS (30 hari)
0,42% peluang dieksploitasi; lebih tinggi dari 34,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
mcafee host intrusion prevention Versi 8.0.0
mcafee host intrusion prevention Versi 8.0.0 p1
mcafee host intrusion prevention Versi 8.0.0 p10
mcafee host intrusion prevention Versi 8.0.0 p11
mcafee host intrusion prevention Versi 8.0.0 p12
mcafee host intrusion prevention Versi 8.0.0 p13
mcafee host intrusion prevention Versi 8.0.0 p14
mcafee host intrusion prevention Versi 8.0.0 p15
mcafee host intrusion prevention Versi 8.0.0 p2
mcafee host intrusion prevention Versi 8.0.0 p3
mcafee host intrusion prevention Versi 8.0.0 p4
mcafee host intrusion prevention Versi 8.0.0 p5
mcafee host intrusion prevention Versi 8.0.0 p6
mcafee host intrusion prevention Versi 8.0.0 p7
mcafee host intrusion prevention Versi 8.0.0 p8
mcafee host intrusion prevention Versi 8.0.0 p9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.