Security Advisory

CVE-2017-12317

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-21 22:00:00
Last updated 2024-08-05 18:36:56
Assigner cisco
CVSS score not scored
State PUBLISHED

Description

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.