RCE in Symantec Endpoint Protection
CVE-2012-0295
The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.040 (89.5th percentile) — read the EPSS interpretation.
Affected products
- Symantec Endpoint_protection — versions 12.1, 12.1.671, 12.1.1000
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)