A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-endpoint-dos-RzOgFKnd | Issue Tracking Vendor Advisory |
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-endpoint-dos-RzOgFKnd | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 07:40
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.0 |
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-endpoint-dos-RzOgFKnd - Issue Tracking, Vendor Advisory |
01 Dec 2023, 14:02
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| First Time |
Cisco secure Endpoint Private Cloud
Cisco secure Endpoint Cisco |
|
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-endpoint-dos-RzOgFKnd - Issue Tracking, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
| CPE | cpe:2.3:a:cisco:secure_endpoint:7.0.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.3.9:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.2.19:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.1.7:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.7.21512:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.2.3:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.3:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.7:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.2.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.1.1:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.5.21322:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.0.7:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.0.9:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.3.3:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.3.21242:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.2.11:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.2.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.3.3:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.3.1:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.2.13:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.3.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:-:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.2.9:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.1.9:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.2.7:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.1.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.1.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.3.7:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:8.1.7.21417:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.2.3:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_endpoint:6.3.5:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:7.3.1:*:*:*:*:windows:*:* cpe:2.3:a:cisco:secure_endpoint:6.2.1:*:*:*:*:windows:*:* |
22 Nov 2023, 17:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-22 17:15
Updated : 2024-11-21 07:40
NVD link : CVE-2023-20084
Mitre link : CVE-2023-20084
CVE.ORG link : CVE-2023-20084
JSON object : View
Products Affected
cisco
- secure_endpoint
- secure_endpoint_private_cloud
CWE