CVE-2015-6547
HighSummary
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.
Risk Assessment
The ability for remote users to execute arbitrary commands may lead to serious security breaches, including device takeover.
Recommendation
It is recommended to update the software to version 5.2.2 DB 5.0.0.1277 or later to mitigate this vulnerability.
Other vulnerabilities in Symantec Web Gateway (SWG) appliances
See all- CVE-2015-5693High
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via vectors related to 'traffic capture.'
- CVE-2015-5690High
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging a 'redirect.'
Original NVD description (English source)
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.