CVE-2020-7251: McAfee Endpoint Security

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.

Affected products

• McAfee Endpoint Security: before 10.6.1 (fixed in 10.6.1)

Published 2020-02-14. Last modified 2026-06-17.