Peter Fejér

**Name of the Vulnerable Software and Affected Versions** Cisco ThousandEyes Endpoint Agent for Windows (affected versions not specified) **Description** The issue is related to improper access controls on files in the local file system of the Cisco ThousandEyes Endpoint Agent for Windows. An authenticated, local attacker could exploit this by using a symbolic link to perform an agent upgrade, redirecting the delete operation of any protected file. This could allow the attacker to delete arbitrary files from the file system of the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.