CVE-2017-12317: Medium severity cisco advanced malware protection for endpoints vulnerability

Published Oct 21, 2017

Updated

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Affected Software

29 affected components

Cisco Advanced Malware Protection=3.1\(10\)

Cisco Advanced Malware Protection=3.1\(15\)

Cisco Advanced Malware Protection=4.0\(0\)

Cisco Advanced Malware Protection=4.0\(1\)

Cisco Advanced Malware Protection=4.0\(2\)

Cisco Advanced Malware Protection=4.1\(0\)

Cisco Advanced Malware Protection=4.1\(1\)

Cisco Advanced Malware Protection=4.1\(4\)

Cisco Advanced Malware Protection=4.2\(0\)

Cisco Advanced Malware Protection=4.2\(1\)

Cisco Advanced Malware Protection=4.3\(0\)

Cisco Advanced Malware Protection=4.3\(1\)

Cisco Advanced Malware Protection=4.4\(0\)

Cisco Advanced Malware Protection=4.4\(1\)

Cisco Advanced Malware Protection=4.4\(2\)

Cisco Advanced Malware Protection=4.4\(4\)

Cisco Advanced Malware Protection=5.0\(1\)

Cisco Advanced Malware Protection=5.0\(3\)

Cisco Advanced Malware Protection=5.0\(5\)

Cisco Advanced Malware Protection=5.0\(7\)

Cisco Advanced Malware Protection=5.0\(9\)

Cisco Advanced Malware Protection=5.1\(1\)

Cisco Advanced Malware Protection=5.1\(3\)

Cisco Advanced Malware Protection=5.1\(5\)

Cisco Advanced Malware Protection=5.1\(7\)

Cisco Advanced Malware Protection=5.1\(9\)

Cisco Advanced Malware Protection=5.1\(11\)

Cisco Advanced Malware Protection=5.1\(13\)

Cisco Advanced Malware Protection=6.0\(1\)

Event History

Oct 21, 2017

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-12317?

The severity of CVE-2017-12317 is classified as medium.

How do I fix CVE-2017-12317?

To fix CVE-2017-12317, upgrade to the latest version of Cisco AMP for Endpoints that addresses this vulnerability.

Who is affected by CVE-2017-12317?

CVE-2017-12317 affects specific versions of Cisco Advanced Malware Protection for Endpoints, including 3.1(10), 3.1(15), and various 4.0 and 5.0 versions.

What kind of attacks can occur due to CVE-2017-12317?

An attacker can exploit CVE-2017-12317 to access a static key value which may lead to unauthorized access to sensitive information.

Is authentication required to exploit CVE-2017-12317?

Yes, an authenticated, local attacker is needed to exploit CVE-2017-12317.

CVE-2017-12317: Medium severity cisco advanced malware protection for endpoints vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2017-12317?

How do I fix CVE-2017-12317?

Who is affected by CVE-2017-12317?

What kind of attacks can occur due to CVE-2017-12317?

Is authentication required to exploit CVE-2017-12317?

Company

Resources

Contact