CVE-2020-3344

CWE-119 — Buffer Overflow CWE-120 — Classic Buffer Overflow4 documents4 sources

Severity

5.5MEDIUM

EPSS

0.0%

top 90.02%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Advanced Malware Protection FOR Endpoints Cisco Cisco AMP FOR Endpoints

Timeline

PublishedMay 22

Latest updateMay 24

Description

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cisco/cisco_amp_for_endpointsn/a

▶NVDcisco/advanced_malware_protection1.12.3.698+1

🔴Vulnerability Details

GHSA

GHSA-296g-m5cw-f8p9: A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, l↗2022-05-24

▶

CVEList

Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability↗2020-05-22

▶

📋Vendor Advisories

Cisco

Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability↗2020-05-20

▶