Strix
26.1K

CVE-2023-20084

MEDIUMCVSS 4.4/10EPSS 0.17%

Last modified

CVE-2023-20084 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.

Metrics

CVSS 3.1
4.4/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

EPSS Probability
0.17%

6.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoSecure EndpointAll versions
CiscoSecure Endpoint6.0.7
CiscoSecure Endpoint6.0.9
CiscoSecure Endpoint6.1.5
CiscoSecure Endpoint6.1.7
CiscoSecure Endpoint6.1.9
CiscoSecure Endpoint6.2.1
CiscoSecure Endpoint6.2.3
CiscoSecure Endpoint6.2.5
CiscoSecure Endpoint6.2.9
CiscoSecure Endpoint6.2.19
CiscoSecure Endpoint6.3.1
CiscoSecure Endpoint6.3.3
CiscoSecure Endpoint6.3.5
CiscoSecure Endpoint6.3.7
CiscoSecure Endpoint7.0.5
CiscoSecure Endpoint7.1.1
CiscoSecure Endpoint7.1.5
CiscoSecure Endpoint7.2.3
CiscoSecure Endpoint7.2.5
CiscoSecure Endpoint7.2.7
CiscoSecure Endpoint7.2.11
CiscoSecure Endpoint7.2.13
CiscoSecure Endpoint7.3.1
CiscoSecure Endpoint7.3.3
CiscoSecure Endpoint7.3.5
CiscoSecure Endpoint7.3.9
CiscoSecure Endpoint8.1.3
CiscoSecure Endpoint8.1.3.21242
CiscoSecure Endpoint8.1.5
CiscoSecure Endpoint8.1.5.21322
CiscoSecure Endpoint8.1.7
CiscoSecure Endpoint8.1.7.21417
CiscoSecure Endpoint8.1.7.21512
CiscoSecure Endpoint Private Cloud< 4.1.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-20084?
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.
How severe is CVE-2023-20084?
CVE-2023-20084 has a CVSS score of 4.4/10 (MEDIUM severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2023-20084?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-20084?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST