Vulnerability in Symantec Endpoint Protection
CVE-2018-12239
Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.005 (41.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 41.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Symantec Endpoint Protection
- Symantec Endpoint Protection Cloud
- Symantec Norton Antivirus
- Symantec Corporation Norton; Endpoint Protection (Sep); Small Business Edition (Sep Sbe); Cloud Cloud) — versions Prior to 22.15.1 [Symantec Endpoint Protection Cloud (SEP Cloud)], Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)], Prior to 22.15 [Norton]
References
- www.securityfocus.com/bid/105918 (VDB Entry, Third Party Advisory, vdb-entry)
- support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html (Vendor Advisory)
Frequently asked questions
- What is CVE-2018-12239?
- CVE-2018-12239 is a medium-severity vulnerability in Symantec Endpoint Protection. CVSS score: 6.8/10. Published 2018-11-29.
- How severe is CVE-2018-12239?
- Medium severity. CVSS v3 base score is 6.8 out of 10.