{"id":"CVE-2020-7293","aliases":["EUVD-2020-28420","GHSA-hw3r-8g7v-p8rq"],"status":"published","title":"Web Gateway (MWG) - Privilege Escalation vulnerability","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.","severity":{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0066,"percentile":0.51861,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2020-09-15T22:50:13Z","modified":"2026-06-17T03:24:40Z","products":[{"vendor":"mcafee","product":"mcafee web gateway (mwg)"},{"vendor":"mcafee","product":"web_gateway"},{"vendor":"mcafee,llc","product":"mcafee web gateway (mwg)"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10323","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7293"},{"url":"https://github.com/advisories/GHSA-hw3r-8g7v-p8rq"}],"sources":{"cve":[{"id":"CVE-2020-7293","title":"Web Gateway (MWG) - Privilege Escalation vulnerability","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.","status":"published","published":"2020-09-15T22:50:13Z","modified":"2024-08-04T09:25:48.986Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28420","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.","status":"published","published":"2020-09-15T22:50:13Z","modified":"2024-08-04T09:25:48Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T03:08:00.054795Z"}],"ghsa":[{"id":"GHSA-hw3r-8g7v-p8rq","title":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows...","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.","status":"published","published":"2022-05-24T17:28:30Z","modified":"2023-01-29T05:03:53Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:45:25.163341Z"}],"nvd":[{"id":"CVE-2020-7293","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.","status":"published","published":"2020-09-15T23:15:12.44Z","modified":"2026-06-17T03:24:40.063Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.7,"vector":"AV:A/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}