Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2020-7280— Symbolic Link vulnerability during DAT update

Quick assessment

Affected
McAfee, LLC McAfee VirusScan Enterprise (VSE)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

McAfee VirusScan Enterprise（VSE）是美国迈克菲（McAfee）公司的一套杀毒软件。该软件提供全方位的安全防护、扫描内存以查找恶意代码和为远程系统优化更新等功能。 McAfee VSE 8.8 Patch 15之前版本中存在安全漏洞。本地用户可通过更改符号链接的目标利用该漏洞未授权删除和创建文件。

CVSS 7.8 · High EPSS 0.40% · P32
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-7280

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Symbolic Link vulnerability during DAT update
Source: CVE Program / CVE List V5
Vulnerability Description
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise (VSE) prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing dependent.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
McAfee VirusScan Enterprise 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee VirusScan Enterprise（VSE）是美国迈克菲（McAfee）公司的一套杀毒软件。该软件提供全方位的安全防护、扫描内存以查找恶意代码和为远程系统优化更新等功能。 McAfee VSE 8.8 Patch 15之前版本中存在安全漏洞。本地用户可通过更改符号链接的目标利用该漏洞未授权删除和创建文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
McAfee, LLC McAfee VirusScan Enterprise (VSE) 8.8.x ~ 8.8 Patch 15 -

II. Public POCs for CVE-2020-7280

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-7280

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-7280 (1)

Other References for CVE-2020-7280 (1)

Same Patch Batch · McAfee, LLC · 2020-06-10 · 6 CVEs total

CVE-2019-3617 7.5 HIGH Privilege escalation in ToPS for Mac
CVE-2019-3585 7.0 HIGH VSE Escalation of Privileges through Alert pop-up window
CVE-2019-3588 6.3 MEDIUM Using VSE to bypass Windows Credentials on Lock screen
CVE-2019-3613 5.9 MEDIUM DLL search order hijacking in MA
CVE-2020-7279 4.6 MEDIUM DLL search order hijacking in Host IPS

IV. Related Vulnerabilities

Same product: McAfee VirusScan Enterprise (VSE)
Same vendor: McAfee, LLC
Same weakness: CWE-269

V. Comments for CVE-2020-7280

No comments yet

Leave a comment