PT-2019-2660 · Cisco · Cisco Amp For Endpoints

Published 2019-07-03 · Updated 2019-10-09 · CVE-2019-1932

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints versions (affected versions not specified)

Description The issue is related to insufficient validation of dynamically loaded modules, which could allow an attacker to execute arbitrary code with the privileges of the AMP service. An authenticated, local attacker with administrator privileges can exploit this by placing a file in a specific location in the Windows filesystem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2019-02546

CVE-2019-1932

Affected Products

Cisco Amp For Endpoints

References · 6

• https://bdu.fstec.ru/vul/2019-02546 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1932 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1932 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-amp-commandinj · Vendor Advisory
• https://tools.cisco.com/security/center/publicationListing.x · Note
• https://t.me/cvenotify/281 · Telegram Post