CVE-2015-8800

CWE-743 documents3 sources
Severity
7.3HIGH
EPSS
0.4%
top 39.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Broadcom Symantec Critical System ProtectionBroadcom Symantec Data Center Security ServerBroadcom Symantec Data Center Security Server AND Agents+2 more
Timeline
PublishedJun 8
Latest updateMay 13

Description

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allow remote authenticated users to conduct argument-injection attacks by leverag…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:HExploitability: 2.1 | Impact: 5.2

Affected Packages4 packages

🔴Vulnerability Details

2
GHSA
GHSA-jgv7-7943-grr9: Symantec Embedded Security: Critical System Protection (SES:CSP) 1↗2022-05-13
▶
CVEList
CVE-2015-8800: Symantec Embedded Security: Critical System Protection (SES:CSP) 1↗2016-06-08
▶
CVE-2015-8800 (HIGH CVSS 7.3) | Symantec Embedded Security: Critica | cvebase.io