Vuln: Cisco Advanced Malware Protection CVE-2019-1932 Local Command Injection Vulnerability

Cisco Advanced Malware Protection is prone to a local command-injection vulnerability.

An attacker may exploit this issue to execute arbitrary code with the privileges of the AMP service.

This issue is being tracked by Cisco Bug ID CSCvp53361.

exploit

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

solution

Solution:
Updates are available. Please see the references or vendor advisory for more information.

info

Bugtraq ID:	109050
Class:	Input Validation Error
CVE:	CVE-2019-1932
Remote:	No
Local:	Yes
Published:	Jul 03 2019 12:00AM
Updated:	Jul 03 2019 12:00AM
Credit:	Edsel Valle of NSS Labs.
Vulnerable:	Cisco Advanced Malware Protection for Endpoints 6.2.3.10807_030519 Cisco Advanced Malware Protection for Endpoints 6.2(3)
Not Vulnerable:	Cisco Advanced Malware Protection for Endpoints 6.3.3

references

References:

• Cisco Homepage (Cisco )
  
• Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulner (Cisco)
  

from SecurityFocus Vulnerabilities https://ift.tt/2JeRmM8