PT-2016-6922
CVE-2016-6449
·
Published
2016-12-14
·
Updated
2016-12-15
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco FireAMP Connector Endpoint software version 1
Description
A vulnerability in the system management of certain FireAMP system processes could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. This could cause a denial of service (DoS) condition, and certain security features could no longer be available.
Recommendations
For Cisco FireAMP Connector Endpoint software version 1, consider restricting access to the system management interface to prevent unauthorized process termination until a fix is available. As a temporary workaround, monitor system processes closely to quickly identify and respond to any potential denial of service conditions.
Found an issue in the description? Have something to add? Feel free to write us 👾