Cisco warns of two high-severity vulnerabilities in ClamAV components used by the Secure Endpoint Connector. The issue enables remote, unauthenticated attackers to trigger a denial-of-service condition by crashing the ClamAV scanning process.
SecurityWeek and Bleeping Computer both report that Cisco has made public proof-of-concept (PoC) material associated with the flaws. Both outlets describe the impact similarly: an attacker can cause the scanner to fail, potentially disrupting malware scanning or related detection workflows. While the reporting emphasizes the same technical outcome, the outlets primarily differ in how they describe the affected product context and the public availability of exploit details.
Both sources indicate that the vulnerabilities are rated high severity and can be exploited without authentication. They urge users to address or mitigate the reported issues to reduce the risk of disruption from DoS attacks. The coverage reflects Cisco’s advisory framing, including the presence of public exploit proof.
