Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-4348

The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Published

2012-12-18T20:55:01.227

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:M/C:C/I:C/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: MULTIPLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

4.1

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.3001 Yes
Application symantec endpoint_protection 11.0.6000 Yes
Application symantec endpoint_protection 11.0.6100 Yes
Application symantec endpoint_protection 11.0.6200 Yes
Application symantec endpoint_protection 11.0.6200.754 Yes
Application symantec endpoint_protection 11.0.6300 Yes
Application symantec endpoint_protection 11.0.7000 Yes
Application symantec endpoint_protection 11.0.7100 Yes
Application symantec endpoint_protection 12.1 Yes
Application symantec endpoint_protection 12.1.671 Yes
Application symantec endpoint_protection 12.1.1000 Yes
Application symantec endpoint_protection 12.0 Yes
Application symantec endpoint_protection 12.1 Yes
References