Read the docs
TI-2017-09093 Aliases CVE-2017-12317GHSA-9jpp-fhrh-58c5

Hard-coded credentials in Cisco AMP for Endpoints

Priority LOW 29CWE-798Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vulnerability is due to the use of a static key value stored in the application used to encrypt the connector protection password. An attacker could exploit this vulnerability by gaining local, administrative access to a Windows host and stopping the Cisco AMP for Endpoints service. Cisco Bug IDs: CSCvg42904.

Why it matters now

EPSS 0.003 22nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco AMP for EndpointsCisco AMP for Endpoints—No fix listedCNA
  • Cisco AMP for Endpoints Vendor— Affected Cisco AMP for Endpoints Fixed in — No fix listed CNA

CPE configurations NVD · 29

CPEVersionsRoleVendor
cpe:2.3:a:cisco:advanced_malware_protection:3.1\(10\):*:*:*:*:*:*:*3.1(10)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:3.1\(15\):*:*:*:*:*:*:*3.1(15)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.0\(0\):*:*:*:*:*:*:*4.0(0)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.0\(1\):*:*:*:*:*:*:*4.0(1)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.0\(2\):*:*:*:*:*:*:*4.0(2)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.1\(0\):*:*:*:*:*:*:*4.1(0)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.1\(1\):*:*:*:*:*:*:*4.1(1)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.1\(4\):*:*:*:*:*:*:*4.1(4)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.2\(0\):*:*:*:*:*:*:*4.2(0)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.2\(1\):*:*:*:*:*:*:*4.2(1)VulnerableCisco
  • cpe:2.3:a:cisco:advanced_malware_protection:3.1\(10\):*:*:*:*:*:*:* Versions 3.1(10) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:3.1\(15\):*:*:*:*:*:*:* Versions 3.1(15) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.0\(0\):*:*:*:*:*:*:* Versions 4.0(0) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.0\(1\):*:*:*:*:*:*:* Versions 4.0(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.0\(2\):*:*:*:*:*:*:* Versions 4.0(2) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.1\(0\):*:*:*:*:*:*:* Versions 4.1(0) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.1\(1\):*:*:*:*:*:*:* Versions 4.1(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.1\(4\):*:*:*:*:*:*:* Versions 4.1(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.2\(0\):*:*:*:*:*:*:* Versions 4.2(0) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.2\(1\):*:*:*:*:*:*:* Versions 4.2(1) Vulnerable ·Cisco
Show 19 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:advanced_malware_protection:4.3\(0\):*:*:*:*:*:*:*4.3(0)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.3\(1\):*:*:*:*:*:*:*4.3(1)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.4\(0\):*:*:*:*:*:*:*4.4(0)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.4\(1\):*:*:*:*:*:*:*4.4(1)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.4\(2\):*:*:*:*:*:*:*4.4(2)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:4.4\(4\):*:*:*:*:*:*:*4.4(4)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.0\(1\):*:*:*:*:*:*:*5.0(1)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.0\(3\):*:*:*:*:*:*:*5.0(3)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.0\(5\):*:*:*:*:*:*:*5.0(5)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.0\(7\):*:*:*:*:*:*:*5.0(7)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.0\(9\):*:*:*:*:*:*:*5.0(9)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(1\):*:*:*:*:*:*:*5.1(1)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(3\):*:*:*:*:*:*:*5.1(3)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(5\):*:*:*:*:*:*:*5.1(5)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(7\):*:*:*:*:*:*:*5.1(7)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(9\):*:*:*:*:*:*:*5.1(9)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(11\):*:*:*:*:*:*:*5.1(11)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:5.1\(13\):*:*:*:*:*:*:*5.1(13)VulnerableCisco
cpe:2.3:a:cisco:advanced_malware_protection:6.0\(1\):*:*:*:*:*:*:*6.0(1)VulnerableCisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.3\(0\):*:*:*:*:*:*:* Versions 4.3(0) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.3\(1\):*:*:*:*:*:*:* Versions 4.3(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.4\(0\):*:*:*:*:*:*:* Versions 4.4(0) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.4\(1\):*:*:*:*:*:*:* Versions 4.4(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.4\(2\):*:*:*:*:*:*:* Versions 4.4(2) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:4.4\(4\):*:*:*:*:*:*:* Versions 4.4(4) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.0\(1\):*:*:*:*:*:*:* Versions 5.0(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.0\(3\):*:*:*:*:*:*:* Versions 5.0(3) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.0\(5\):*:*:*:*:*:*:* Versions 5.0(5) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.0\(7\):*:*:*:*:*:*:* Versions 5.0(7) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.0\(9\):*:*:*:*:*:*:* Versions 5.0(9) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(1\):*:*:*:*:*:*:* Versions 5.1(1) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(3\):*:*:*:*:*:*:* Versions 5.1(3) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(5\):*:*:*:*:*:*:* Versions 5.1(5) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(7\):*:*:*:*:*:*:* Versions 5.1(7) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(9\):*:*:*:*:*:*:* Versions 5.1(9) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(11\):*:*:*:*:*:*:* Versions 5.1(11) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:5.1\(13\):*:*:*:*:*:*:* Versions 5.1(13) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:advanced_malware_protection:6.0\(1\):*:*:*:*:*:*:* Versions 6.0(1) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-12317
  2. 2026-10-03 Alias added: GHSA-9jpp-fhrh-58c5

References

Advisory 1

  • TI-2020-11281 A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local… CVSS 3.1HIGH 7.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences