Skip to content
fr Sign in
5.0 Medium

CVE-2023-20084 A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local…

Description

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Endpoint 8.1 8.1.3 → 8.1.7.21512 No fix stated
Cisco Secure Endpoint 7.3 7.3.1 → 7.3.9 No fix stated
Cisco Secure Endpoint 7.2 7.2.3 → 7.2.13 No fix stated
Cisco Secure Endpoint 7.1 7.1.1 → 7.1.5 No fix stated
Cisco Secure Endpoint 7.0.5 No fix stated
Cisco Secure Endpoint 6.3 6.3.1 → 6.3.7 No fix stated
Cisco Secure Endpoint 6.2 6.2.1 → 6.2.19 No fix stated
Cisco Secure Endpoint 6.1 6.1.5 → 6.1.9 No fix stated
Cisco Secure Endpoint 6.0 6.0.7 → 6.0.9 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Endpoint

The 23 CVEs of Cisco Secure Endpoint →
CVE-2026-20348 A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS… 7.5 High CVE-2026-20345 A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS… 7.5 High CVE-2026-20339 A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a… 7.5 High CVE-2026-20347 A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a… 7.5 High
Track this CVE