CVE-2013-5016

CWE-2643 documents3 sources

Severity

7.6HIGH

EPSS

1.4%

top 19.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Broadcom Symantec Critical System Protection

Timeline

PublishedMay 8

Latest updateMay 13

Description

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages1 packages

▶NVDbroadcom/symantec_critical_system_protection5.2.8

🔴Vulnerability Details

GHSA

GHSA-pmgg-9f6f-p4wr: Symantec Critical System Protection (SCSP) before 5↗2022-05-13

▶

CVEList

CVE-2013-5016: Symantec Critical System Protection (SCSP) before 5↗2014-05-08

▶