CVE-2017-13681
HighSummary
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, allowing a user to gain elevated access to resources normally protected at lower access levels.
Risk Assessment
The risk to the organization involves unauthorized users potentially gaining access to sensitive system resources, which could lead to serious security breaches.
Recommendation
It is recommended to update Symantec Endpoint Protection to version 12.1 RU6 MP9 or later to mitigate this vulnerability.
Other vulnerabilities in Symantec Endpoint Protection
See all- CVE-2017-6331High
Prior to SEP 14 RU1, the Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real-time protection for the application that is run on servers and clients.
- CVE-2015-1492High
CVE-2015-1492 describes an untrusted search path vulnerability in the client of Symantec Endpoint Protection 12.1 before version 12.1-RU6-MP1, allowing local users to gain privileges via a Trojan horse DLL in a client install package.
Original NVD description (English source)
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.