CVE-2017-12317 | BDVDB-2026-92006 Detail

Description#

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-10-21Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.