CVE-2021-23880

Published: Feb 10, 2021Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.

Affected (1)

Products: Mcafee: Endpoint Security

1 product

Endpoint Security

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Endpoint Security	Before 10.7.0

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10345

Source: trellixpsirt@trellix.com

Broken LinkVendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10345

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

Timeline

No history available yet.