CVE-2020-7316

Published: Oct 7, 2020Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered.

Affected (1)

Products: Mcafee: File And Removable Media Protection

1 product

File And Removable Media Protection

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee File And Removable Media Protection	Before 5.3.0

Related CWEs

Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10330

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10330

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.