Endpoint Protection

 View Only

Another Great Reason to Upgrade to RU6: SYM15-005

  • 1.  Another Great Reason to Upgrade to RU6: SYM15-005

    Posted Jun 18, 2015 12:42 PM

    Just raising awareness of three known vulnerabilities in earlier releases:

    Symantec Endpoint Protection Manager and Client Issues

    CVSS2

    Base Score

    Impact

    Exploitability

    CVSS2 Vector

    SEPM Auth User Blind SQLi in PHP prepared statements - Medium

    4.5

    6.4

    3.5

    AV:A/AC:M/Au:M/C:P/I:P/A:P

    Local DoS Deadlock in sysplant.sys prevents system shutdown- Medium

    4.4

    6.9

    2.7

    AV:L/AC:M/Au:S/C:N/I:N/A:C

    Local Elevation of Privilege DLL loading - Medium

    4.1

    6.44

    2.7

    AV:L/AC:M/Au:S/C:P/I:P/A:P

     

    Upgrade to RU6 and remain invulnerable!