CVE-2019-12758

Опубликовано: 15 нояб. 2019

Источник: nvd

CVSS3: 6.7

CVSS2: 7.2

EPSS Низкий

Описание

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature.

Ссылки

https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-12758
Exploit
Third Party Advisory
https://support.symantec.com/us/en/article.SYMSA1488.html
Vendor Advisory
https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-12758
Exploit
Third Party Advisory
https://support.symantec.com/us/en/article.SYMSA1488.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*

Версия до 14.2 (включая)

cpe:2.3:a:symantec:endpoint_protection:14.2:ru1:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00079

Низкий

6.7 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-4q2j-4mf3-x29x

github

больше 3 лет назад