CVE-2020-3314

A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service (DoS) condition of the Cisco AMP for Endpoints service. The vulnerability is due to insufficient input validation of specific file attributes. An attacker could exploit this vulnerability by providing a crafted file to a user of an affected system. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash, resulting in missed detection and logging of the potentially malicious file. Continued attempts to scan the file could result in a DoS condition of the Cisco AMP for Endpoints service.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4emac-dos-kfKjUGtMVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4emac-dos-kfKjUGtMVendor Advisory

Published

May 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3308A vulnerability in the Image Signature Verification feature …4.9
• CVE-2020-3309A vulnerability in Cisco Firepower Device Manager (FDM) On-B…7.2
• CVE-2020-3310A vulnerability in the XML parser code of Cisco Firepower De…4.9
• CVE-2020-3311A vulnerability in the web interface of Cisco Firepower Mana…6.1
• CVE-2020-3312A vulnerability in the application policy configuration of C…7.5
• CVE-2020-3313A vulnerability in the web UI of Cisco Firepower Management …6.1
• CVE-2020-3315Multiple Cisco products are affected by a vulnerability in t…5.3
• CVE-2020-3317A vulnerability in the ssl_inspection component of Cisco Fir…7.5
• CVE-2020-3318Multiple vulnerabilities in Cisco Firepower Management Cente…9.8
• CVE-2020-3319A vulnerability in Cisco Webex Network Recording Player and …3.3
• CVE-2020-3320A vulnerability in the web-based management interface of Cis…5.4
• CVE-2020-3321A vulnerability in Cisco Webex Network Recording Player and …3.3