CVE-2017-12317
CVE-2017-12317
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
21 oct 2017Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.
Productos afectados
n/a · Cisco AMP for Endpoints¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →