CVE-2015-8798
HighSummary
CVE-2015-8798 describes a directory traversal vulnerability in the Management Server of Symantec Embedded Security products. It allows remote authenticated users to execute arbitrary code via unspecified vectors.
Risk Assessment
This vulnerability could lead to serious security breaches, enabling attackers to execute code remotely on the organization's systems. This may result in data loss or system takeover.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability. A security audit should also be conducted to minimize the risk of exploitation.
Other vulnerabilities in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, SES:CSP for Controllers and Devices 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1.
Original NVD description (English source)
Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to execute arbitrary code via unspecified vectors.