CVE-2017-13681
High
Description
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSymantec Endpoint Protection
PublishedNov 6, 2017
First seenNov 6, 2017
How to fix
Update
- symantec endpoint_protection12.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec endpoint_protection | v < 12.1 | 12.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.