CVE-2021-30648

CWE-287 — Improper Authentication3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.5%
top 34.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Broadcom Symantec Advanced Secure Gateway 500-10 FirmwareBroadcom Symantec Advanced Secure Gateway S200-30 FirmwareBroadcom Symantec Advanced Secure Gateway S200-40 Firmware+5 more
Timeline
PublishedJun 30
Latest updateMay 24

Description

The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages9 packages

🔴Vulnerability Details

2
GHSA
GHSA-23p9-49c6-fm5w: The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability↗2022-05-24
▶
CVEList
CVE-2021-30648: The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability↗2021-06-30
▶
CVE-2021-30648 (CRITICAL CVSS 9.8) | The Symantec Advanced Secure Gatewa | cvebase.io