CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20084

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.4%

CVSS Severity

CVSS v3 Score 5.0

References

Products affected by CVE-2023-20084

Cisco » Secure Endpoint » Version: N/A

cpe:2.3:a:cisco:secure_endpoint:-
Cisco » Secure Endpoint » Version: 6.0.7

cpe:2.3:a:cisco:secure_endpoint:6.0.7
Cisco » Secure Endpoint » Version: 6.0.9

cpe:2.3:a:cisco:secure_endpoint:6.0.9
Cisco » Secure Endpoint » Version: 6.1.5

cpe:2.3:a:cisco:secure_endpoint:6.1.5
Cisco » Secure Endpoint » Version: 6.1.7

cpe:2.3:a:cisco:secure_endpoint:6.1.7
Cisco » Secure Endpoint » Version: 6.1.9

cpe:2.3:a:cisco:secure_endpoint:6.1.9
Cisco » Secure Endpoint » Version: 6.2.1

cpe:2.3:a:cisco:secure_endpoint:6.2.1
Cisco » Secure Endpoint » Version: 6.2.19

cpe:2.3:a:cisco:secure_endpoint:6.2.19
Cisco » Secure Endpoint » Version: 6.2.3

cpe:2.3:a:cisco:secure_endpoint:6.2.3
Cisco » Secure Endpoint » Version: 6.2.5

cpe:2.3:a:cisco:secure_endpoint:6.2.5
Cisco » Secure Endpoint » Version: 6.2.9

cpe:2.3:a:cisco:secure_endpoint:6.2.9
Cisco » Secure Endpoint » Version: 6.3.1

cpe:2.3:a:cisco:secure_endpoint:6.3.1
Cisco » Secure Endpoint » Version: 6.3.3

cpe:2.3:a:cisco:secure_endpoint:6.3.3
Cisco » Secure Endpoint » Version: 6.3.5

cpe:2.3:a:cisco:secure_endpoint:6.3.5
Cisco » Secure Endpoint » Version: 6.3.7

cpe:2.3:a:cisco:secure_endpoint:6.3.7
Cisco » Secure Endpoint » Version: 7.0.5

cpe:2.3:a:cisco:secure_endpoint:7.0.5
Cisco » Secure Endpoint » Version: 7.1.1

cpe:2.3:a:cisco:secure_endpoint:7.1.1
Cisco » Secure Endpoint » Version: 7.1.5

cpe:2.3:a:cisco:secure_endpoint:7.1.5
Cisco » Secure Endpoint » Version: 7.2.11

cpe:2.3:a:cisco:secure_endpoint:7.2.11
Cisco » Secure Endpoint » Version: 7.2.13

cpe:2.3:a:cisco:secure_endpoint:7.2.13
Cisco » Secure Endpoint » Version: 7.2.3

cpe:2.3:a:cisco:secure_endpoint:7.2.3
Cisco » Secure Endpoint » Version: 7.2.5

cpe:2.3:a:cisco:secure_endpoint:7.2.5
Cisco » Secure Endpoint » Version: 7.2.7

cpe:2.3:a:cisco:secure_endpoint:7.2.7
Cisco » Secure Endpoint » Version: 7.3.1

cpe:2.3:a:cisco:secure_endpoint:7.3.1
Cisco » Secure Endpoint » Version: 7.3.3

cpe:2.3:a:cisco:secure_endpoint:7.3.3
Cisco » Secure Endpoint » Version: 7.3.5

cpe:2.3:a:cisco:secure_endpoint:7.3.5
Cisco » Secure Endpoint » Version: 7.3.9

cpe:2.3:a:cisco:secure_endpoint:7.3.9
Cisco » Secure Endpoint » Version: 8.1.3

cpe:2.3:a:cisco:secure_endpoint:8.1.3
Cisco » Secure Endpoint » Version: 8.1.3.21242

cpe:2.3:a:cisco:secure_endpoint:8.1.3.21242
Cisco » Secure Endpoint » Version: 8.1.5

cpe:2.3:a:cisco:secure_endpoint:8.1.5
Cisco » Secure Endpoint » Version: 8.1.5.21322

cpe:2.3:a:cisco:secure_endpoint:8.1.5.21322
Cisco » Secure Endpoint » Version: 8.1.7

cpe:2.3:a:cisco:secure_endpoint:8.1.7
Cisco » Secure Endpoint » Version: 8.1.7.21417

cpe:2.3:a:cisco:secure_endpoint:8.1.7.21417
Cisco » Secure Endpoint » Version: 8.1.7.21512

cpe:2.3:a:cisco:secure_endpoint:8.1.7.21512
Cisco » Secure Endpoint Private Cloud » Version: 3.6.0

cpe:2.3:a:cisco:secure_endpoint_private_cloud:3.6.0
Cisco » Secure Endpoint Private Cloud » Version: 3.8.0

cpe:2.3:a:cisco:secure_endpoint_private_cloud:3.8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20084

Products

Pricing

Contact Us