Read the docs
TI-2020-05889 Aliases CVE-2020-7284GHSA-rh8v-qc8w-7rj2

Network Security Management (NSM) - Exposure of Sensitive Information

Priority LOW 37CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

Why it matters now

EPSS 0.00371 31st percentileScored 2026-11-07
Fix Fixed Network Security Management (NSM) (McAfee): 10.1.7.7

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeNetwork Security Management (NSM)before 10.1.7.710.1.7.7Patch availableCNA
  • Network Security Management (NSM) VendorMcAfee Affected before 10.1.7.7 Fixed in 10.1.7.7 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:network_security_management:*:*:*:*:*:*:*:*9.0 to before 9.2.9.55; 10.0 to before 10.1.7.7VulnerableMcAfee
  • cpe:2.3:a:mcafee:network_security_management:*:*:*:*:*:*:*:* Versions 9.0 to before 9.2.9.55; 10.0 to before 10.1.7.7 Vulnerable ·McAfee

Remediation

  • Fix · CNA Network Security Management (NSM) (McAfee) Fixed in 10.1.7.7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-7284
  2. 2026-10-03 Alias added: GHSA-rh8v-qc8w-7rj2

References

Other 1

  • TI-2020-05939 Network Security Management (NSM) - Cross Site Request Forgery vulnerability CVSS 3.1MEDIUM 6.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences