Vulnerability in File Type Detection of Cisco Advanced Malware Protection for macOS
CVE-2018-0237

5.8MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Amp For Endpoints
Vendor
CVE Published:
19 April 2018

What is CVE-2018-0237?

The file type detection mechanism in Cisco's Advanced Malware Protection for Endpoints macOS Connector has a critical flaw that can be exploited by attackers. This vulnerability arises from the reliance on file extensions for detecting DMG files. An attacker could circumvent malware detection by sending a DMG file with an unusual extension to the affected device. This exploit allows unauthorized access to potentially harmful files, undermining the security measures intended to protect the system from malware threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cisco AMP for Endpoints Cisco AMP for Endpoints

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
https://wwws.nightwatchcybersecurity.com/2018/02/25/resea...
x_refsource_MISC

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.