CVE-2018-15437: Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability
First published: Thu Nov 08 2018(Updated: )
A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system without being analyzed for threats. The vulnerability is due to improper process resource handling. An attacker could exploit this vulnerability by gaining local access to a system running Microsoft Windows and protected by Cisco Immunet or Cisco AMP for Endpoints and executing a malicious file. A successful exploit could allow the attacker to prevent the scanning services from functioning properly and ultimately prevent the system from being protected from further intrusion.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Advanced Malware Protection For Endpoints | ||
| Cisco Immunet For Endpoints | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is vulnerability CVE-2018-15437 in Cisco Immunet and Cisco AMP?
A vulnerability in the system scanning component that allows a local attacker to disable scanning functionality.
How does CVE-2018-15437 impact Microsoft Windows?
The vulnerability could allow executable files to be launched on the system.
What is the severity level of CVE-2018-15437?
The severity level is rated as medium with a CVSS score of 5.5.
How can I mitigate CVE-2018-15437 in Cisco Immunet and Cisco AMP?
Apply the patches and updates provided by Cisco to address this vulnerability.
Where can I find more information about CVE-2018-15437?
You can refer to the Cisco Security Advisory and other provided references for more details.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/title
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco advanced malware protection for endpoints
- canonical/cisco immunet for endpoints
- vendor/microsoft
- canonical/microsoft windows