CVE-2017-12317

Published: Oct 22, 2017Modified: May 13, 2026

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Affected (29)

Products: Cisco: Advanced Malware Protection

Cisco

1 product

Advanced Malware Protection

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Cisco Advanced Malware Protection	Version 3.1(10)
Cisco Advanced Malware Protection	Version 3.1(15)
Cisco Advanced Malware Protection	Version 4.0(0)
Cisco Advanced Malware Protection	Version 4.0(1)
Cisco Advanced Malware Protection	Version 4.0(2)
Cisco Advanced Malware Protection	Version 4.1(0)
Cisco Advanced Malware Protection	Version 4.1(1)
Cisco Advanced Malware Protection	Version 4.1(4)
Cisco Advanced Malware Protection	Version 4.2(0)
Cisco Advanced Malware Protection	Version 4.2(1)
Cisco Advanced Malware Protection	Version 4.3(0)
Cisco Advanced Malware Protection	Version 4.3(1)
Cisco Advanced Malware Protection	Version 4.4(0)
Cisco Advanced Malware Protection	Version 4.4(1)
Cisco Advanced Malware Protection	Version 4.4(2)
Cisco Advanced Malware Protection	Version 4.4(4)
Cisco Advanced Malware Protection	Version 5.0(1)
Cisco Advanced Malware Protection	Version 5.0(3)
Cisco Advanced Malware Protection	Version 5.0(5)
Cisco Advanced Malware Protection	Version 5.0(7)
Cisco Advanced Malware Protection	Version 5.0(9)
Cisco Advanced Malware Protection	Version 5.1(11)
Cisco Advanced Malware Protection	Version 5.1(13)
Cisco Advanced Malware Protection	Version 5.1(1)
Cisco Advanced Malware Protection	Version 5.1(3)
Cisco Advanced Malware Protection	Version 5.1(5)
Cisco Advanced Malware Protection	Version 5.1(7)
Cisco Advanced Malware Protection	Version 5.1(9)
Cisco Advanced Malware Protection	Version 6.0(1)