KLA10107
ACE vulnerability in Cisco Security Agent

Updated: 06/03/2020
Detect date
?
12/14/2007
Severity
?
Critical
Description

A buffer overflow was found in Cisco Security Agent. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SMB packet.

Affected products

Cisco Security Agent 4.5.1 versions 4.5.1.659 and earlier for Windows
Cisco Security Agent 5.0 versions 5.0.193 and earlier for Windows
Cisco Security Agent 5.1 versions 5.1.79 and earlier for Windows
Cisco Security Agent 5.2 versions 5.2.0.237 and earlier for Windows

Solution

Update to latest version

Original advisories

Cisco bulletin

Impacts
?
ACE 
[?]
Related products
Cisco Security Agent (CSA)
Find out the statistics of the vulnerabilities spreading in your region