CVE-2020-3343: Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability
A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3343?
CVE-2020-3343 is a vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software that could allow an authenticated, local attacker to cause a buffer overflow on an affected device.
How does CVE-2020-3343 affect Cisco Advanced Malware Protection for Endpoints?
CVE-2020-3343 affects Cisco Advanced Malware Protection for Endpoints on Linux and Mac operating systems.
What is the severity of CVE-2020-3343?
The severity of CVE-2020-3343 is medium with a CVSSv3 score of 5.5.
How can an attacker exploit CVE-2020-3343?
An attacker can exploit CVE-2020-3343 by leveraging insufficient input validation to cause a buffer overflow on an affected device.
Is there a fix available for CVE-2020-3343?
Yes, Cisco has released software updates to address the vulnerability. Please refer to the official Cisco Security Advisory for more information.