CVE-2020-3343: 
Cisco Secure Endpoint vulnerability analysis and mitigation

A vulnerability (CVE-2020-3343) was discovered in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software. The vulnerability was disclosed on May 20, 2020, affecting the Cisco Advanced Malware Protection (AMP) for Endpoints software on Linux and Mac systems (Cisco Advisory).

The vulnerability is caused by insufficient input validation in the affected software. It has been assigned a CVSS v3.1 Base Score of 5.5 (Medium), with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The vulnerability requires local access and low privileges to exploit, with no user interaction needed (AttackerKB).

A successful exploitation of this vulnerability could allow an attacker to cause a buffer overflow on an affected device, resulting in the Cisco AMP for Endpoints service crashing and restarting. The impact is primarily on the availability of the service, with no direct effect on confidentiality or integrity (AttackerKB).

The vulnerability requires an authenticated, local attacker to send a crafted packet to an affected device. The attack complexity is considered low, but the attacker must have local access and basic privileges on the system (AttackerKB).

No workarounds are available for this vulnerability. Users should apply the appropriate patches and updates provided by Cisco to affected systems (Cisco Advisory).