3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
A vulnerability in the endpoint software of Cisco AMP for Endpoints and
Clam AntiVirus could allow an authenticated, local attacker to cause the
running software to delete arbitrary files on the system. The vulnerability
is due to a race condition that could occur when scanning malicious files.
An attacker with local shell access could exploit this vulnerability by
executing a script that could trigger the race condition. A successful
exploit could allow the attacker to delete arbitrary files on the system
that the attacker would not normally have privileges to delete, producing
system instability or causing the endpoint software to stop working.
blog.clamav.net/2020/07/clamav-01024-security-patch-released.html
launchpad.net/bugs/cve/CVE-2020-3350
nvd.nist.gov/vuln/detail/CVE-2020-3350
security-tracker.debian.org/tracker/CVE-2020-3350
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-famp-ZEpdXy
ubuntu.com/security/notices/USN-4435-1
ubuntu.com/security/notices/USN-4435-2
www.cve.org/CVERecord?id=CVE-2020-3350
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%