CVE-2017-12317
CVE-2017-12317
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Oct 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.
Affected products
n/a · Cisco AMP for EndpointsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →