CVE-2017-12317 describes a vulnerability in Cisco AMP for Endpoints where an authenticated, local attacker with administrative privileges can access a static key used to encrypt the connector protection password. This allows an attacker to potentially decrypt sensitive information. The vulnerability has a CVSS v3.0 score of 6.7 (Medium), indicating high impact on confidentiality, integrity, and availability, but requiring local administrative access and stopping the AMP service. There is no known exploit code available in Metasploit, Nuclei, or ExploitDB, and it has not been added to CISA's KEV catalog. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and no active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.1\(10\)CPE matchmatch criteria | cpe:2.3:a:cisco:advanced_malware_protection:3.1\(10\):*:*:*:*:*:*:* | ||
3.1\(15\)CPE matchmatch criteria | cpe:2.3:a:cisco:advanced_malware_protection:3.1\(15\):*:*:*:*:*:*:* | ||
4.0\(0\)CPE matchmatch criteria | cpe:2.3:a:cisco:advanced_malware_protection:4.0\(0\):*:*:*:*:*:*:* | ||
4.0\(1\)CPE matchmatch criteria | cpe:2.3:a:cisco:advanced_malware_protection:4.0\(1\):*:*:*:*:*:*:* | ||
4.0\(2\)CPE matchmatch criteria | cpe:2.3:a:cisco:advanced_malware_protection:4.0\(2\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.