Cisco Advanced Malware Protection vulnerabilities

2 CVEs affecting Cisco Advanced Malware Protection, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14418, published 2021-01-30.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-14418, published 2021-01-30. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving…
• CVE-2017-12317, published 2017-10-22. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static…