What is CVE-2021-1386?

CVE-2021-1386 is a high-severity vulnerability in Cisco Advanced_malware_protection_for_endpoints, classified under Uncontrolled Search Path Element. CVSS score: 7.0/10. Published 2021-04-08.

How severe is CVE-2021-1386?

High severity. CVSS v3 base score is 7.0 out of 10.

Vulnerability in Cisco Advanced_malware_protection_for_endpoints

CVE-2021-1386

A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL h…

EPSS: 0.003 (20.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Advanced_malware_protection_for_endpoints
Cisco Amp For Endpoints — versions n/a
Cisco Clamav
Cisco Immunet

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1386?: CVE-2021-1386 is a high-severity vulnerability in Cisco Advanced_malware_protection_for_endpoints, classified under Uncontrolled Search Path Element. CVSS score: 7.0/10. Published 2021-04-08.
How severe is CVE-2021-1386?: High severity. CVSS v3 base score is 7.0 out of 10.