{"vulnerability": "cve-2020-7315", "sightings": [{"uuid": "47ad1e49-6b19-406b-b3c2-312e61f7c718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7315", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-424ebad0-6bee0cbd5f75d218", "content": "", "creation_timestamp": "2025-03-03T06:58:05.157635Z"}, {"uuid": "edff24ac-6386-4b02-ad33-b81f253af47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7315", "type": "seen", "source": "https://t.me/hacking_Attack/39939", "content": "a reverse shell which can lead to privilege escalation to obtain root privileges.\u201d\n\nWells told Security Week\u00a0that exploiting this bug requires access to the McAfee ePO host, as in, the underlying Windows host, not the application itself.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream Elevated Access Lets Threat Actors Run AmokExploiting privilege-escalation\u00a0bugs lets threat actors paw at resources that should normally be locked safely away. Attackers can use those elevated privileges to steal confidential data, run administrative commands, read files from the file system and deploy malware, as well as to potentially evade detection during attacks.\n\nThis isn\u2019t the first time that privilege-escalation bugs have turned up in McAfee\u2019s Agent. A few months ago, in September, the security firm patched one such bug\u00a0(CVE-2020-7315) that was discovered by Tenable security researcher Cl\u00e9ment Notin.\n\nThat earlier bug involved DLL injection in McAfee Agent that could have allowed a local administrator to kill or tamper with the antivirus, without knowing the McAfee password.\nSee Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-12-90x90.jpg Cisco bug gives remote attackers root privileges via debug mode3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.jpg Same-origin violation vulnerability in Safari 15 could leak a user\u2019s website history and identity6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Qlocker-Ransomware-1-90x90.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwide1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/https___specials-images.forbesimg.com_imageserve_61aff357a4c71fc225ab8ba7_0x0-90x90.jpg AWS fixes security flaws that exposed AWS customer data1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs \u2018colors\u2019 and \u2018faker\u2019 breaking thousands of apps2 weeks ago\nThe post McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:58.825970Z"}, {"uuid": "dcf4b47b-049e-4e08-8d8b-489740d25c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7315", "type": "seen", "source": "https://t.me/hacking_Attack/39939", "content": "a reverse shell which can lead to privilege escalation to obtain root privileges.\u201d\n\nWells told Security Week\u00a0that exploiting this bug requires access to the McAfee ePO host, as in, the underlying Windows host, not the application itself.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream Elevated Access Lets Threat Actors Run AmokExploiting privilege-escalation\u00a0bugs lets threat actors paw at resources that should normally be locked safely away. Attackers can use those elevated privileges to steal confidential data, run administrative commands, read files from the file system and deploy malware, as well as to potentially evade detection during attacks.\n\nThis isn\u2019t the first time that privilege-escalation bugs have turned up in McAfee\u2019s Agent. A few months ago, in September, the security firm patched one such bug\u00a0(CVE-2020-7315) that was discovered by Tenable security researcher Cl\u00e9ment Notin.\n\nThat earlier bug involved DLL injection in McAfee Agent that could have allowed a local administrator to kill or tamper with the antivirus, without knowing the McAfee password.\nSee Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: threatpost.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-12-90x90.jpg Cisco bug gives remote attackers root privileges via debug mode3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-10-90x90.jpg SSRF vulnerability in VMWare authentication software could allow access to user data5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Safari-Apple-navigateur-90x90.jpg Same-origin violation vulnerability in Safari 15 could leak a user\u2019s website history and identity6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/Qlocker-Ransomware-1-90x90.png Qlocker ransomware returns \u2013 targets QNAP NAS devices worldwide1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/https___specials-images.forbesimg.com_imageserve_61aff357a4c71fc225ab8ba7_0x0-90x90.jpg AWS fixes security flaws that exposed AWS customer data1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/image-apple-releases-15-2-1-update-for-ios-and-ipados-to-fix-bugs-164203308032302-90x90.jpg Apple fixes doorLock bug that can disable iPhones and iPads2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/0_Windows-headpic-90x90.jpg Microsoft: New critical Windows HTTP vulnerability is wormable2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/powerdir-exploit-microsoft-90x90.jpg Microsoft: powerdir bug gives access to protected macOS user data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/using-npm-create-javascript-icon-libraries-90x90.png Dev corrupts NPM libs \u2018colors\u2019 and \u2018faker\u2019 breaking thousands of apps2 weeks ago\nThe post McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:21.321865Z"}]}