CVE-2017-12317CWE-798

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software

published October 21, 2017

CVSS
—
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2017-10-21T22:00Z
EPSS history
Timeline
  • 21 OCT 22:00Z
    The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software
    cvelistv5