Lucene search

K
cveMitreCVE-2012-0295
HistoryMay 23, 2012 - 9:55 p.m.

CVE-2012-0295

2012-05-2321:55:01
CWE-94
mitre
web.nvd.nist.gov
23
symantec
endpoint protection
file-insertion attacks
cve-2012-0295
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.016

Percentile

87.3%

The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.

Affected configurations

Nvd
Node
symantecendpoint_protectionMatch12.1
OR
symantecendpoint_protectionMatch12.1.671
OR
symantecendpoint_protectionMatch12.1.1000
VendorProductVersionCPE
symantecendpoint_protection12.1cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:*:*:*
symantecendpoint_protection12.1.671cpe:2.3:a:symantec:endpoint_protection:12.1.671:*:*:*:*:*:*:*
symantecendpoint_protection12.1.1000cpe:2.3:a:symantec:endpoint_protection:12.1.1000:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.016

Percentile

87.3%