EUVD-2018-7315

Malware in sbrugna...

CVE-2021-1566: Improper Following of a Certificate's Chain of Trust

A vulnerability in the Cisco Advanced Malware Protection AMP for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance ESA and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers...

CVE-2021-1386

A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...

CVE-2021-1386: Uncontrolled Search Path Element

A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...

CVE-2021-1280: Uncontrolled Search Path Element

A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection AMP for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need valid...

PT-2021-1838

Name of the Vulnerable Software and Affected Versions Cisco Advanced Malware Protection AMP for Endpoints for Windows affected versions not specified Cisco Immunet for Windows affected versions not specified Description A vulnerability in the loading mechanism of specific DLLs could allow an...

CVE-2020-3350

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. A...

CVE-2020-3350: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. A...

PT-2020-2976

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints affected versions not specified Clam AntiVirus affected versions not specified Description A vulnerability in the endpoint software could allow an authenticated, local attacker to delete arbitrary files on the system du...

CVE-2020-3314

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service DoS condition of the Cisco AMP for Endpoints service. The vulnerabili...

PT-2020-3056

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints versions affected versions not specified Description The issue is related to a buffer overflow in memory due to insufficient input validation. This could allow an authenticated, local attacker to cause a buffer overflow...

PT-2020-3055

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints versions affected versions not specified Description The issue is related to a buffer overflow in memory due to insufficient input validation. This could allow an authenticated, local attacker to cause a buffer overflow...

CVE-2020-3344: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi...

CVE-2020-3314: Improper Input Validation

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service DoS condition of the Cisco AMP for Endpoints service. The vulnerabili...

CVE-2020-3343: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi...

PT-2020-3054

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints affected versions not specified Description The issue is related to insufficient input validation of specific file attributes in the file scan process of Cisco AMP for Endpoints Mac Connector Software. This could cause...

Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service DoS condition of the Cisco AMP for Endpoints service. The vulnerabili...

Cisco AMP for Endpoints Linux and Mac Connector Software Buffer Overflow Vulnerability

Cisco AMP for Endpoints Mac Connector Software and Cisco AMP for Endpoints Linux Connector Software are both products of Cisco, Inc.Cisco AMP for Endpoints Mac Cisco AMP for Endpoints Mac Connector Software is a suite of endpoint applications based on the macOS platform that integrates static and...

CVE-2019-1932: Insufficient Verification of Data Authenticity

A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...

PT-2019-2660

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints versions affected versions not specified Description The issue is related to insufficient validation of dynamically loaded modules, which could allow an attacker to execute arbitrary code with the privileges of the AMP...