csirt@kutim:~/threat-intel/cve/CVE-2023-20084

Katalog CVE

CVSS 4.4 · Medium EPSS 0,17%

Kerentanan Incomplete Model of Endpoint Features pada cisco secure endpoint, cisco secure endpoint private cloud. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.

Rincian

Terbit di NVD
22 November 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-437: Incomplete Model of Endpoint Features
EPSS (30 hari)
0,17% peluang dieksploitasi; lebih tinggi dari 6,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure endpoint Semua versi
cisco secure endpoint Versi 6.0.7
cisco secure endpoint Versi 6.0.9
cisco secure endpoint Versi 6.1.5
cisco secure endpoint Versi 6.1.7
cisco secure endpoint Versi 6.1.9
cisco secure endpoint Versi 6.2.1
cisco secure endpoint Versi 6.2.3
cisco secure endpoint Versi 6.2.5
cisco secure endpoint Versi 6.2.9
cisco secure endpoint Versi 6.2.19
cisco secure endpoint Versi 6.3.1
cisco secure endpoint Versi 6.3.3
cisco secure endpoint Versi 6.3.5
cisco secure endpoint Versi 6.3.7
cisco secure endpoint Versi 7.0.5
cisco secure endpoint Versi 7.1.1
cisco secure endpoint Versi 7.1.5
cisco secure endpoint Versi 7.2.3
cisco secure endpoint Versi 7.2.5
cisco secure endpoint Versi 7.2.7
cisco secure endpoint Versi 7.2.11
cisco secure endpoint Versi 7.2.13
cisco secure endpoint Versi 7.3.1
cisco secure endpoint Versi 7.3.3
cisco secure endpoint Versi 7.3.5
cisco secure endpoint Versi 7.3.9
cisco secure endpoint Versi 8.1.3
cisco secure endpoint Versi 8.1.3.21242
cisco secure endpoint Versi 8.1.5
cisco secure endpoint Versi 8.1.5.21322
cisco secure endpoint Versi 8.1.7
cisco secure endpoint Versi 8.1.7.21417
cisco secure endpoint Versi 8.1.7.21512
cisco secure endpoint private cloud Semua versi sebelum 4.1.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.