CVE-2019-12758

6.7MEDIUM

Key Information

Vendor
Symantec
Status
Symantec Endpoint Protection
Vendor
CVE Published:
15 November 2019

Summary

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature.

Affected Version(s)

Symantec Endpoint Protection = prior to 14.2 RU2

Refferences

https://support.symantec.com/us/en/article.SYMSA1488.html
x_refsource_MISC
https://safebreach.com/Post/Symantec-Endpoint-Protection-...
x_refsource_MISC

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.