CVE-2017-12317: Cisco Advanced Malware Protection

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Affected products

• Cisco Advanced Malware Protection: version 3.1(10) only; version 3.1(15) only; version 4.0(0) only; version 4.0(1) only; version 4.0(2) only; version 4.1(0) only; …

Published 2017-10-22. Last modified 2026-06-17.