CVE-2023-20212
High
Description
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Cisco Secure Endpoint
PublishedAug 18, 2023
First seenAug 18, 2023
Weakness typeCWE-825CWE-825
How to fix
Update
- cisco secure_endpoint8.1.7.21585 or later
- cisco secure_endpoint_private_cloud3.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure_endpoint | v < 8.1.7.21585 | 8.1.7.21585 |
| cisco secure_endpoint_private_cloud | v < 3.8.0 | 3.8.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.