Vulnerability Details : CVE-2012-4348
The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Vulnerability category: Input validationExecute code
Products affected by CVE-2012-4348
- cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp1a:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp1:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp1:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.3001:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.6200.754:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.6000:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.6100:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.6300:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.6200:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.7000:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:11.0.7100:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:12.1.671:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:12.1.1000:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:12.1:-:small_business:*:*:*:*:*
- cpe:2.3:a:symantec:endpoint_protection:12.0:-:small_business:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-4348
0.34%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 72 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-4348
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:A/AC:L/Au:M/C:C/I:C/A:C |
4.1
|
10.0
|
NIST |
CWE ids for CVE-2012-4348
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-4348
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00
Symantec Endpoint Protection Management Consoles Multiple Issues
-
http://www.securityfocus.com/bid/56846
Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
-
http://www.securitytracker.com/id?1027863
Symantec Endpoint Protection Input Validation Flaw Lets Remote Users Execute Arbitrary Code - SecurityTracker
Jump to