Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability

A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system without being analyzed for threats. The vulnerability is due to improper process resource handling. An attacker could exploit this vulnerability by gaining local access to a system running Microsoft Windows and protected by Cisco Immunet or Cisco AMP for Endpoints and executing a malicious file. A successful exploit could allow the attacker to prevent the scanning services from functioning properly and ultimately prevent the system from being protected from further intrusion.

N/A

未加控制的资源消耗(资源穷尽)

Cisco Immunet和Cisco AMP for Endpoints 资源管理错误漏洞

Cisco Immunet和AMP for Endpoints都是美国思科（Cisco）公司的产品。Cisco Immunet是一套恶意软件防护程序。AMP for Endpoints是一套集成了静态和动态恶意软件分析以及威胁情报于一体的终端应用程序。 基于Microsoft Windows平台的Cisco Immunet和AMP for Endpoints中的系统扫描组件存在拒绝服务漏洞。本地攻击者可利用该漏洞禁用产品的扫描功能。

N/A

N/A