CVE-2018-15437 (CNNVD-201811-189)
中文标题:
Cisco Immunet和Cisco AMP for Endpoints 资源管理错误漏洞
英文标题:
Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability
漏洞描述
中文描述:
Cisco Immunet和AMP for Endpoints都是美国思科（Cisco）公司的产品。Cisco Immunet是一套恶意软件防护程序。AMP for Endpoints是一套集成了静态和动态恶意软件分析以及威胁情报于一体的终端应用程序。 基于Microsoft Windows平台的Cisco Immunet和AMP for Endpoints中的系统扫描组件存在拒绝服务漏洞。本地攻击者可利用该漏洞禁用产品的扫描功能。
英文描述:
A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system without being analyzed for threats. The vulnerability is due to improper process resource handling. An attacker could exploit this vulnerability by gaining local access to a system running Microsoft Windows and protected by Cisco Immunet or Cisco AMP for Endpoints and executing a malicious file. A successful exploit could allow the attacker to prevent the scanning services from functioning properly and ultimately prevent the system from being protected from further intrusion.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco AMP for Endpoints | n/a | - | - |
cpe:2.3:a:cisco:cisco_amp_for_endpoints:n_a:*:*:*:*:*:*:*
|
| cisco | advanced_malware_protection_for_endpoints | - | - | - |
cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:-:*:*:*:*:*:*:*
|
| cisco | immunet_for_endpoints | - | - | - |
cpe:2.3:a:cisco:immunet_for_endpoints:-:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
cve.org
cve.org
exploitdb
exploitdb
cve.org
CVSS评分详情
3.0 (cna)
MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2018-15437 |
2025-11-11 15:19:42 | 2025-11-11 07:35:07 |
| NVD | nvd_CVE-2018-15437 |
2025-11-11 14:56:00 | 2025-11-11 07:43:41 |
| CNNVD | cnnvd_CNNVD-201811-189 |
2025-11-11 15:10:07 | 2025-11-11 07:54:07 |
| EXPLOITDB | exploitdb_EDB-45829 |
2025-11-11 15:05:48 | 2025-11-11 08:49:23 |
版本与语言
安全公告
变更历史
查看详细变更
- references_count: 3 -> 6
- tags_count: 0 -> 3
- data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 资源管理错误
- cnnvd_id: 未提取 -> CNNVD-201811-189
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 3
- data_sources: ['cve'] -> ['cve', 'nvd']