Cisco » Advanced Malware Protection : Security Vulnerabilities, CVEs,
A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.
Max CVSS
7.0
EPSS Score
0.04%
Published
2021-01-30
Updated
2021-02-04
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.
Max CVSS
6.7
EPSS Score
0.04%
Published
2017-10-22
Updated
2019-10-09
2 vulnerabilities found