Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-3344

Опубликовано: 22 мая 2020
Источник: nvd
CVSS3: 5.5
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:*:*:*:*:*:linux:*:*
Версия до 1.12.3.698 (включая)
cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:*:*:*:*:*:mac_os:*:*
Версия до 1.12.3.738 (включая)

EPSS

Процентиль: 9%
0.00034
Низкий

5.5 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-119
CWE-120

Связанные уязвимости

github
больше 3 лет назад

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.

CVSS3: 5.5
fstec
больше 5 лет назад

Уязвимость системы обнаружения угроз Cisco Advanced Malware Protection for Endpoints, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 9%
0.00034
Низкий

5.5 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-119
CWE-120