CVE-2020-3343

Medium

Description

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.

SeverityMedium

CVSS5.5

Exploit probability—

Product

Cisco Advanced Malware Protection For Endpoints

PublishedMay 22, 2020

First seenMay 22, 2020

Weakness typeCWE-119Memory buffer bounds error

How to fix

Vendor advisories

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb

Affected products

Product	Affected versions	Fixed in
cisco advanced_malware_protection_for_endpoints	v ≤ 1.12.3.698, v ≤ 1.12.3.738	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.