Skip to content
Sign in
Not rated

CVE-2017-12317 The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in…

Description

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Affected products and versions

Product Affected versions Fixed in
Cisco AMP for Endpoints Versions not published

Other CVEs of Cisco AMP for Endpoints

The 2 CVEs of Cisco AMP for Endpoints →
CVE-2018-0237 A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints… Not rated
Track this CVE