CVE-2016-6449

Name of the Vulnerable Software and Affected Versions Cisco FireAMP Connector Endpoint software version 1

Description A vulnerability in the system management of certain FireAMP system processes could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. This could cause a denial of service (DoS) condition, and certain security features could no longer be available.

Recommendations For Cisco FireAMP Connector Endpoint software version 1, consider restricting access to the system management interface to prevent unauthorized process termination until a fix is available. As a temporary workaround, monitor system processes closely to quickly identify and respond to any potential denial of service conditions.