PT-2019-2660 · Cisco · Cisco Amp For Endpoints

Publicado 2019-07-03 · Atualizado 2019-10-09 · CVE-2019-1932

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints versions (affected versions not specified)

Description The issue is related to insufficient validation of dynamically loaded modules, which could allow an attacker to execute arbitrary code with the privileges of the AMP service. An authenticated, local attacker with administrator privileges can exploit this by placing a file in a specific location in the Windows filesystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

BDU:2019-02546

CVE-2019-1932

Produtos afetados

Cisco Amp For Endpoints

Referências · 6

• https://bdu.fstec.ru/vul/2019-02546 · Nota de Segurança
• https://tools.cisco.com/security/center/publicationListing.x · Nota
• https://osv.dev/vulnerability/CVE-2019-1932 · Aviso do Fabricante
• https://t.me/cvenotify/281 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-1932 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-amp-commandinj · Aviso do Fabricante