CVE-2020-5825

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 74.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Endpoint Protection
Timeline
PublishedFeb 11
Latest updateMay 24

Description

Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an arbitrary file write vulnerability, which is a type of issue whereby an attacker is able to overwrite existing files on the resident system without proper privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5symantec_endpoint_protection_(sep)_and_symantec_endpoint_protection_small_business_edition_(sep_sbe)Prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively

🔴Vulnerability Details

2
GHSA
GHSA-3r3g-prmp-4m5w: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14↗2022-05-24
▶
CVEList
CVE-2020-5825: Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14↗2020-02-11
▶