Lucene search

SymantecCVE-2017-6330

HistorySep 13, 2017 - 2:29 p.m.

CVE-2017-6330

2017-09-1314:29:00

symantec

web.nvd.nist.gov

cve-2017-6330

symantec

encryption

desktop

sed

10.4.1mp2

denial of service

resource consumption

crafted web requests

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

57.1%

JSON

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests."

Affected configurations

Nvd

Node

symantecencryption_desktopRange≤10.4.1mp1

VendorProductVersionCPE
symantecencryption_desktop*cpe:2.3:a:symantec:encryption_desktop:*:mp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	encryption_desktop	*	cpe:2.3:a:symantec:encryption_desktop::mp1::::::*

CNA Affected

[
  {
    "product": "Symantec Encryption Desktop",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "SED prior to 10.4.1MP2"
      }
    ]
  }
]

References

www.securityfocus.com/bid/100552

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170907_00

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

57.1%

JSON

Related for CVE-2017-6330