PT-2017-17004 · Symantec · Symantec Endpoint Protection+1

Hyp3Rlinx + 1 · Published 2017-11-06 · Updated 2020-09-16 · CVE-2017-6331

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to SEP 14 RU1

Description The issue is related to a Tamper-Protection Bypass, which is a type of attack that bypasses the real-time protection for applications running on servers and clients.

Recommendations For versions prior to SEP 14 RU1, update to SEP 14 RU1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2017-6331

Affected Products

Symantec Endpoint Protection

Symantec Endpoint Protection Client

References · 6

• 🔥 https://exploit-db.com/exploits/43134 · Exploit
• https://osv.dev/vulnerability/CVE-2017-6331 · Vendor Advisory
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6331 · Security Note
• http://securityfocus.com/bid/101502 · Note
• http://securitytracker.com/id/1039775 · Note