CVE-2017-13680 — Endpoint Protection vulnerability

3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 72.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Symantec Endpoint Protection Symantec Corporation Symantec Endpoint Protection

Timeline

PublishedNov 6

Latest updateMay 13

Description

Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDsymantec/endpoint_protection< 12.1+1

▶CVEListV5symantec_corporation/symantec_endpoint_protectionPrior to SEP 12.1 RU6 MP9 & SEP 14 RU1

🔴Vulnerability Details

GHSA

GHSA-p7c3-6329-8qq7: Prior to SEP 12↗2022-05-13

▶

CVEList

CVE-2017-13680: Prior to SEP 12↗2017-11-06

▶