VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026

CVE-2023-20084

CVE-2023-20084

Description

A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time window. This vulnerability is due to a timing issue that occurs between various software components. An attacker could exploit this vulnerability by persuading a user to put a malicious file into a specific folder and then persuading the user to execute the file within a limited time window. A successful exploit could allow the attacker to cause the endpoint software to fail to quarantine the malicious file or kill its process. Note: This vulnerability only applies to deployments that have the Windows Folder Redirection feature enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

37
  • Cisco Systems, Inc./Secure Endpoint36 versions
    cpe:2.3:a:cisco:secure_endpoint:-:*:*:*:*:windows:*:*+ 35 more
    • cpe:2.3:a:cisco:secure_endpoint:-:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.0.7:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.0.9:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.1.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.1.7:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.1.9:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.2.19:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.2.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.2.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.2.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.2.9:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.3.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.3.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.3.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:6.3.7:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.0.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.1.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.1.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.2.11:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.2.13:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.2.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.2.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.2.7:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.3.1:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.3.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.3.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:7.3.9:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.3.21242:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.3:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.5.21322:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.5:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.7.21417:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.7.21512:*:*:*:*:windows:*:*
    • cpe:2.3:a:cisco:secure_endpoint:8.1.7:*:*:*:*:windows:*:*
    • (no CPE)
    • (no CPE)range: 6.0.9
  • Cisco Systems, Inc./Secure Endpoint Private Cloud
    cpe:2.3:a:cisco:secure_endpoint_private_cloud:*:*:*:*:*:*:*:*
    Range: <4.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.