PT-2017-17004 · Symantec · Symantec Endpoint Protection+1

Hyp3Rlinx + 1 · Publicado 2017-11-06 · Atualizado 2020-09-16 · CVE-2017-6331

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to SEP 14 RU1

Description The issue is related to a Tamper-Protection Bypass, which is a type of attack that bypasses the real-time protection for applications running on servers and clients.

Recommendations For versions prior to SEP 14 RU1, update to SEP 14 RU1 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2017-6331

Produtos afetados

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Referências · 6

• 🔥 https://exploit-db.com/exploits/43134 · Exploit
• http://securityfocus.com/bid/101502 · Nota
• https://osv.dev/vulnerability/CVE-2017-6331 · Aviso do Fabricante
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6331 · Nota de Segurança
• http://securitytracker.com/id/1039775 · Nota