Lucene search

SymantecCVE-2017-13680

HistoryNov 06, 2017 - 11:29 p.m.

CVE-2017-13680

2017-11-0623:29:00

symantec

web.nvd.nist.gov

symantec

endpoint protection

windows

security

vulnerability

unauthorized access

file deletion

cve-2017-13680

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

22.9%

JSON

Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product’s UI to perform unauthorized file deletes on the resident file system.

Affected configurations

Nvd

Node

symantecendpoint_protectionRange<12.1m9

symantecendpoint_protectionMatch14

AND

microsoftwindowsMatch-

VendorProductVersionCPE
symantecendpoint_protection*cpe:2.3:a:symantec:endpoint_protection:*:m9:*:*:*:*:*:*
symantecendpoint_protection14cpe:2.3:a:symantec:endpoint_protection:14:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	endpoint_protection	*	cpe:2.3:a:symantec:endpoint_protection::m9::::::*
symantec	endpoint_protection	14	cpe:2.3:a:symantec:endpoint_protection:14:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "product": "Symantec Endpoint Protection",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101503

www.securitytracker.com/id/1039775

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

22.9%

JSON

Related for CVE-2017-13680