Description (CNA)
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Secure Endpoint | affected 6.0.9; affected 6.0.7; affected 6.1.5; affected 6.1.7; affected 6.1.9; affected 6.2.1; affected 6.2.5; affected 6.2.19; affected 6.2.3; affected 6.2.9; affected 6.3.5; affected 6.3.1; affected 6.3.7; affected 6.3.3; affected 7.0.5; affected 7.1.1; affected 7.1.5; affected 7.2.13; affected 7.2.7; affected 7.2.3; affected 7.2.11; affected 7.2.5; affected 7.3.1; affected 7.3.9; affected 7.3.3; affected 7.3.5; affected 8.1.7; affected 8.1.5; affected 8.1.3.21242; affected 8.1.7.21512; affected 8.1.3; affected 8.1.5.21322; affected 8.1.7.21417 |
CWE
CWE-437
References
ADP enrichment
No English description supplied.