Aller au contenu
en Se connecter
5.0 Moyenne

CVE-2023-20084 A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local…

Description

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Secure Endpoint 8.1 8.1.3 → 8.1.7.21512 Pas de correctif indiqué
Cisco Secure Endpoint 7.3 7.3.1 → 7.3.9 Pas de correctif indiqué
Cisco Secure Endpoint 7.2 7.2.3 → 7.2.13 Pas de correctif indiqué
Cisco Secure Endpoint 7.1 7.1.1 → 7.1.5 Pas de correctif indiqué
Cisco Secure Endpoint 7.0.5 Pas de correctif indiqué
Cisco Secure Endpoint 6.3 6.3.1 → 6.3.7 Pas de correctif indiqué
Cisco Secure Endpoint 6.2 6.2.1 → 6.2.19 Pas de correctif indiqué
Cisco Secure Endpoint 6.1 6.1.5 → 6.1.9 Pas de correctif indiqué
Cisco Secure Endpoint 6.0 6.0.7 → 6.0.9 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Secure Endpoint

Les 23 CVE de Cisco Secure Endpoint →
CVE-2026-20348 A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS… 7.5 Élevée CVE-2026-20345 A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS… 7.5 Élevée CVE-2026-20339 A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a… 7.5 Élevée CVE-2026-20347 A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a… 7.5 Élevée
Suivre cette CVE