CVE-2018-0237

A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allow an unauthenticated, remote attacker to bypass malware detection. The vulnerability occurs because the software relies on only the file extension for detecting DMG files. An attacker could exploit this vulnerability by sending a DMG file with a nonstandard extension to a device that is running an affected AMP for Endpoints macOS Connector. An exploit could allow the attacker to bypass configured malware detection. Cisco Bug IDs: CSCve34034.

• CWE-20
• CWE-706

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ampVendor Advisory
• https://wwws.nightwatchcybersecurity.com/2018/02/25/research-compressed-files-auto-detection-on-macos/Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ampVendor Advisory
• https://wwws.nightwatchcybersecurity.com/2018/02/25/research-compressed-files-auto-detection-on-macos/Third Party Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0230A vulnerability in the internal packet-processing functional…8.6
• CVE-2018-0231A vulnerability in the Transport Layer Security (TLS) librar…8.6
• CVE-2018-0233A vulnerability in the Secure Sockets Layer (SSL) packet rea…
• CVE-2018-0234A vulnerability in the implementation of Point-to-Point Tunn…
• CVE-2018-0235A vulnerability in the 802.11 frame validation functionality…7.4
• CVE-2018-0236Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0238A vulnerability in the role-based resource checking function…
• CVE-2018-0239A vulnerability in the egress packet processing functionalit…7.5
• CVE-2018-0240Multiple vulnerabilities in the Application Layer Protocol I…8.6
• CVE-2018-0241A vulnerability in the UDP broadcast forwarding function of …
• CVE-2018-0242A vulnerability in the WebVPN web-based management interface…
• CVE-2018-0243A vulnerability in the detection engine of Cisco Firepower S…5.8