Riskcovery

CVE-2017-12317

State
Published
Severity
Not scored
Published
Oct 21, 2017
Updated
Aug 5, 2024
Reserved
Aug 3, 2017

Read the record on cve.org

Description

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
Cisco AMP for Endpointsn/a
  • Cisco AMP for EndpointsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.