CVE-2020-7250— ENS symbolic link log file manipulation vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-7250
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ENS symbolic link log file manipulation vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated local user to potentially gain an escalation of privileges by pointing the link to files which the user which not normally have permission to alter via carefully creating symbolic links from the ENS log file directory.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: NVD (National Vulnerability Database)
Vulnerability Title
McAfee Endpoint Security 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee Endpoint Security（ENS）是美国迈克菲（McAfee）公司的一套提供智能协作和先进的威胁防御的框架。该框架支持对实时通信的整个威胁防御生命周期进行控制并进行可操作的威胁取证等。 基于Windows平台的McAfee ENS 10.7.0之前版本中存在后置链接漏洞。攻击者可利用该漏洞提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| McAfee LLC | McAfee Endpoint Security (ENS) | 10.x ~ 10.7.0 April 2020 Update | - |
II. Public POCs for CVE-2020-7250
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-7250
请登录查看更多情报信息。
- https://kc.mcafee.com/corporate/index?page=content&id=SB10309x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2020-7250
Same Patch Batch · McAfee LLC · 2020-04-15 · 11 CVEs total
| CVE-2020-7257 | 8.4 HIGH | Privilege Escalation vulnerability through Symbolic links in ENS |
| CVE-2020-7278 | 7.4 HIGH | McAfee firewall rules not enforced correctly |
| CVE-2020-7277 | 6.8 MEDIUM | McAfee processes not protected |
| CVE-2020-7273 | 6.7 MEDIUM | Autorun registry bypass |
| CVE-2020-7259 | 6.6 MEDIUM | Unsigned executable vulnerability in ENS can be used to bypass intended self-protection ru |
| CVE-2020-7274 | 6.6 MEDIUM | ENS elevated permissions vulnerability |
| CVE-2020-7276 | 6.4 MEDIUM | Unrestricted Policy Management using MfeUpgradeTool.exe |
| CVE-2020-7261 | 6.1 MEDIUM | Buffer overwrite in ENS allowed to bypass AMSI protection |
| CVE-2020-7275 | 4.8 MEDIUM | Unquoted service paths for some McAfee ENS files |
| CVE-2020-7255 | 3.9 LOW | Privilege Escalation vulnerability in ENS |
IV. Related Vulnerabilities
Same product: McAfee Endpoint Security (ENS)
- CVE-2020-7331
Unquoted service executable path in McAfee Endpoint Security - CVE-2020-7255
Privilege Escalation vulnerability in ENS - CVE-2020-7257
Privilege Escalation vulnerability through Symbolic links in - CVE-2020-7259
Unsigned executable vulnerability in ENS can be used to bypa - CVE-2020-7261
Buffer overwrite in ENS allowed to bypass AMSI protection
Same vendor: McAfee LLC
- CVE-2021-23881
Stored Cross Site Scripting in ENS - CVE-2021-23883
Null Pointer Dereference vulnerability in McAfee Endpoint Se - CVE-2021-23882
Improper Access Control in the ENS installer - CVE-2021-23880
Improper Access Control in the ENS installer - CVE-2021-23878
Clear text storage of sensitive Information in ENS
Same weakness: CWE-59
- CVE-2021-47949
CyberPanel 2.1 Authenticated Remote Code Execution via Symli - CVE-2026-41882
JetBrains IntelliJ IDEA 后置链接漏洞 - CVE-2026-27105
Dell Alienware Purchased Apps 后置链接漏洞 - CVE-2026-5161
Improper Authentication in TUBITAK BILGEM's Pardus About - CVE-2026-41397
OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File
V. Comments for CVE-2020-7250
No comments yet