Vulnerability Details : CVE-2013-5016
Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.
Products affected by CVE-2013-5016
- cpe:2.3:a:broadcom:symantec_critical_system_protection:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-5016
0.42%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-5016
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.6
|
HIGH | AV:N/AC:H/Au:N/C:C/I:C/A:C |
4.9
|
10.0
|
NIST |
CWE ids for CVE-2013-5016
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-5016
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00
Symantec Critical System Protection for Windows Default Policy BypassVendor Advisory
-
http://www.securityfocus.com/bid/67161
Symantec Critical System Protection for Windows CVE-2013-5016 Security Bypass Vulnerability
Jump to