Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2020-3343
HistoryMay 22, 2020 - 6:15 a.m.

CVE-2020-3343

2020-05-2206:15:10
CWE-119
CWE-120
cisco
web.nvd.nist.gov
47
cisco
amp
endpoints
linux
mac
connector
software
vulnerability
buffer overflow
nvd
cve-2020-3343

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.

Affected configurations

Nvd
Node
ciscoadvanced_malware_protection_for_endpointsRange≤1.12.3.698linux
OR
ciscoadvanced_malware_protection_for_endpointsRange≤1.12.3.738mac_os
VendorProductVersionCPE
ciscoadvanced_malware_protection_for_endpoints*cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:*:*:*:*:*:linux:*:*
ciscoadvanced_malware_protection_for_endpoints*cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:*:*:*:*:*:mac_os:*:*

CNA Affected

[
  {
    "product": "Cisco AMP for Endpoints",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Related

cvelist 1
prion 1
nvd 1
cisco 1
threatpost 1
cvelist
cvelist
CVE-2020-3343 Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability
2020-05-22 05:15:20
prion
prion
Input validation
2020-05-22 06:15:00
nvd
nvd
CVE-2020-3343
2020-05-22 06:15:10
cisco
cisco
Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability
2020-05-20 16:00:00
threatpost
threatpost
Critical Cisco Bug in Unified CCX Allows Remote Code Execution
2020-05-21 15:44:30

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for CVE-2020-3343
cvelist1prion1nvd1cisco1threatpost1