medium6.7
CVE-2017-12317
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software.
Impact
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Advanced Malware Protection | Versions 3.1\(10\), 3.1\(15\), 4.0\(0\), 4.0\(1\), 4.0\(2\), 4.1\(0\) |