CVE-2020-7316 MEDIUM

CVE-2020-7316: File and Removable Media Protection update fixes one vulnerability

Vendor Mcafee
Product File & Removable Media Protection (FRP)
Weakness CWE-428
Published October 7, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

6.6/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered.

Key dates

02Disclosure timeline

October 7, 2020 CVE published
August 4, 2024 Record updated