CVE-2021-1566: Improper Following of a Certificate's Chain of Trust

A vulnerability in the Cisco Advanced Malware Protection AMP for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance ESA and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers...

CVE-2021-1386

A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...

CVE-2021-1386: Uncontrolled Search Path Element

A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...

CVE-2021-1280: Uncontrolled Search Path Element

A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection AMP for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need valid...

CVE-2019-1932: Insufficient Verification of Data Authenticity

A vulnerability in Cisco Advanced Malware Protection AMP for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit thi...

CVE-2018-15452: Uncontrolled Search Path Element

A vulnerability in the DLL loading component of Cisco Advanced Malware Protection AMP for Endpoints on Windows could allow an authenticated, local attacker to disable system scanning services or take other actions to prevent detection of unauthorized intrusions. To exploit this vulnerability, the...

CVE-2018-15437: Uncontrolled Resource Consumption

A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection AMP for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system...

PT-2018-1782

Name of the Vulnerable Software and Affected Versions Cisco Immunet and Cisco Advanced Malware Protection AMP for Endpoints affected versions not specified Description The issue is related to improper process resource handling in the system scanning component. This could allow a local attacker to...

PT-2018-1829

Name of the Vulnerable Software and Affected Versions: Cisco Advanced Malware Protection AMP for Endpoints on Windows affected versions not specified Description: A vulnerability in the DLL loading component could allow an authenticated, local attacker to disable system scanning services by...

PT-2018-8691

Name of the Vulnerable Software and Affected Versions: Cisco Advanced Malware Protection AMP for Endpoints macOS Connector affected versions not specified Description: A vulnerability in the file type detection mechanism could allow an unauthenticated, remote attacker to bypass malware detection...

PT-2017-12478

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA affected versions not specified Description A vulnerability in the Advanced Malware Protection AMP file filtering feature could allow an unauthenticated, remote attacker to bypass a configured AMP file filterin...

PT-2016-6844

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Email Security Appliances ESA versions 9.5 through the first fixed release Cisco AsyncOS Software for Web Security Appliances WSA versions prior to the first fixed release Description A vulnerability in Advanced...

CVE-2016-1368: Undefined Security Weakness

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...