Cisco Advanced Malware Protection For Endpoints vulnerabilities

CVE-2021-1386 [HIGH] CWE-427 CVE-2021-1386: A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protec A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this vulnerability, the attacker would need valid credenti

CVE-2021-1280 [HIGH] CWE-427 CVE-2021-1280: A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection (AMP) A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection (AMP) for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need valid credentials on the Windows system. This vulnerability is due to

CVE-2020-3350 [MEDIUM] CWE-362 CVE-2020-3350: A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow a A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vu

CVE-2020-3343 [MEDIUM] CWE-119 CVE-2020-3343: A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an af

CVE-2020-3314 [MEDIUM] CWE-20 CVE-2020-3314: A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cau A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service (DoS) condition of the Cisco AMP for Endpoints service. The vulnerability is due to insufficient input validation of specific

CVE-2020-3344 [MEDIUM] CWE-119 CVE-2020-3344: A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an af

CVE-2019-1932 [MEDIUM] CWE-345 CVE-2019-1932: A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit this vulnerability by placing a file in a specific locatio

CVE-2018-0237 [MEDIUM] CWE-20 CVE-2018-0237: A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allow an unauthenticated, remote attacker to bypass malware detection. The vulnerability occurs because the software relies on only the file extension for detecting DMG files. An attacker could exploit this vulnerabilit

CVE-2017-12312 [MEDIUM] CWE-20 CVE-2017-12312: An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware install An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker to execute arbitrary code via DLL hijacking if a local user with administrative privileges executes the installer in the current working directory where a crafted DLL has been placed by an attacker. The v