A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.
oryginał ENCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:HCisco Secure Endpoint
APPCisco6.0.76.0.96.1.56.1.76.1.96.2.16.2.196.2.36.2.56.2.96.3.16.3.36.3.56.3.77.0.5+ 18 więcejCisco Secure Endpoint Private Cloud
APPCisco< 4.1.0
Powiązane podatności
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerabilit...
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to ca...
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a deni...
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow ...
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and...