CVE-2015-8151

CWE-78 — OS Command Injection3 documents3 sources

Severity

9.1CRITICAL

EPSS

1.6%

top 18.09%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Symantec Encryption Management Server

Timeline

PublishedFeb 18

Latest updateMay 17

Description

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 2.3 | Impact: 6.0

Affected Packages1 packages

▶NVDsymantec/encryption_management_server3.3.2

🔴Vulnerability Details

GHSA

GHSA-cc8p-8p4m-65r7: Symantec Encryption Management Server (SEMS) 3↗2022-05-17

▶

CVEList

CVE-2015-8151: Symantec Encryption Management Server (SEMS) 3↗2016-02-18

▶