Описание
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.
Ссылки
- Vendor Advisory
- Patch
- Vendor Advisory
- Vendor Advisory
- Patch
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:symantec:ghost_solutions_suite:1.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:ghost_solutions_suite:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:ghost_solutions_suite:2.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 87%
0.03505
Низкий
10 Critical
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
почти 4 года назад
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.
EPSS
Процентиль: 87%
0.03505
Низкий
10 Critical
CVSS2
Дефекты
CWE-287