CVE-2020-2020CWE-755

Cortex XDR Agent: Exceptional condition denial-of-service (DoS)

Medium · published December 9, 2020

CVSS v3.1
5.5
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent from starting. The exceptional condition is persistent and prevents Cortex XDR Agent from starting when the software or machine is restarted. This issue impacts: Cortex XDR Agent 5.0 versions earlier than 5.0.10; Cortex XDR Agent 6.1 versions earlier than 6.1.7; Cortex XDR Agent 7.0 versions earlier than 7.0.3; Cortex XDR Agent 7.1 versions earlier than 7.1.2.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00307 · 22.3th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2020-12-09T18:00Z
EPSS history
Timeline
  • 09 DEC 18:00Z
    Cortex XDR Agent: Exceptional condition denial-of-service (DoS)
    cvelistv5