CVE-2020-7284: McAfee Network Security Management

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

Affected products

• McAfee Network Security Management: from 9.0, before 9.2.9.55 (fixed in 9.2.9.55); from 10.0, before 10.1.7.7 (fixed in 10.1.7.7)

Published 2020-07-03. Last modified 2026-06-17.