CVE-2020-3344

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@cisco.com

Published

2020-05-22

Last modified

2024-11-15

Weaknesses

CWE-119, CWE-120

Affected products

• Advanced Malware Protection For Endpoints (Cisco)
• Cisco Amp For Endpoints (Cisco)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb