{"api_version":"1","generated_at":"2026-07-23T13:16:48+00:00","cve":"CVE-2020-7320","urls":{"html":"https://cve.report/CVE-2020-7320","api":"https://cve.report/api/cve/CVE-2020-7320.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-7320","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7320"},"summary":{"title":"CVE-2020-7320","description":"Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services.","state":"PUBLIC","assigner":"psirt@mcafee.com","published_at":"2020-09-09 10:15:00","updated_at":"2023-11-07 03:26:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","refsource":"","tags":[],"title":"McAfee Security Bulletin - Endpoint Security for Windows update fixes four vulnerabilities (CVE-2020-7319, CVE-2020-7320, CVE-2020-7322, and CVE-2020-7323)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7320","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7320","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"7320","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"endpoint_security","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"windows","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"7320","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"endpoint_security","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"windows","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"psirt@mcafee.com","DATE_PUBLIC":"2020-09-08T00:00:00.000Z","ID":"CVE-2020-7320","STATE":"PUBLIC","TITLE":"Protection Mechanism Failure in ENS for Windows"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Endpoint Security for Windows ","version":{"version_data":[{"version_affected":"<","version_name":"10.7.x","version_value":"10.7.0 September 2020 Update"}]}}]},"vendor_name":"McAfee LLC"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-693 Protection Mechanism Failure"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327"}]},"source":{"discovery":"INTERNAL"}},"nvd":{"publishedDate":"2020-09-09 10:15:00","lastModifiedDate":"2023-11-07 03:26:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"},"exploitabilityScore":1.5,"impactScore":5.3},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"severity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*","versionEndExcluding":"10.7.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"7320","Ordinal":"167599","Title":"CVE-2020-7320","CVE":"CVE-2020-7320","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"7320","Ordinal":"1","NoteData":"Protection Mechanism Failure vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"7320","Ordinal":"2","NoteData":"2020-09-09","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"7320","Ordinal":"3","NoteData":"2020-09-09","Type":"Other","Title":"Modified"}]}}}