Cisco Advanced Malware Protection CVE-2019-1932 Local Command Injection Vulnerability
BID:109050
Info
Cisco Advanced Malware Protection CVE-2019-1932 Local Command Injection Vulnerability
| Bugtraq ID: | 109050 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1932 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 03 2019 12:00AM |
| Updated: | Jul 03 2019 12:00AM |
| Credit: | Edsel Valle of NSS Labs. |
| Vulnerable: |
Cisco Advanced Malware Protection for Endpoints 6.2.3.10807_030519 Cisco Advanced Malware Protection for Endpoints 6.2(3) |
| Not Vulnerable: |
Cisco Advanced Malware Protection for Endpoints 6.3.3 |
Discussion
Cisco Advanced Malware Protection CVE-2019-1932 Local Command Injection Vulnerability
Cisco Advanced Malware Protection is prone to a local command-injection vulnerability.
An attacker may exploit this issue to execute arbitrary code with the privileges of the AMP service.
This issue is being tracked by Cisco Bug ID CSCvp53361.
Cisco Advanced Malware Protection is prone to a local command-injection vulnerability.
An attacker may exploit this issue to execute arbitrary code with the privileges of the AMP service.
This issue is being tracked by Cisco Bug ID CSCvp53361.
Exploit / POC
Cisco Advanced Malware Protection CVE-2019-1932 Local Command Injection Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].