9.3

CVE-2011-0688

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111.  NOTE: some of these details are obtained from third party information.

Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Antivirus Version10.0 Editioncorporate
Symantec ≫ Antivirus Version10.0 Updatemr1 Editioncorporate
Symantec ≫ Antivirus Version10.0 Updatemr2 Editioncorporate
Symantec ≫ Antivirus Version10.0.1 Editioncorporate
Symantec ≫ Antivirus Version10.0.1.1 Editioncorporate
Symantec ≫ Antivirus Version10.0.1.2 Editioncorporate
Symantec ≫ Antivirus Version10.0.2 Editioncorporate
Symantec ≫ Antivirus Version10.0.2.1 Editioncorporate
Symantec ≫ Antivirus Version10.0.2.2 Editioncorporate
Symantec ≫ Antivirus Version10.0.3 Editioncorporate
Symantec ≫ Antivirus Version10.0.4 Editioncorporate
Symantec ≫ Antivirus Version10.0.5 Editioncorporate
Symantec ≫ Antivirus Version10.0.6 Editioncorporate
Symantec ≫ Antivirus Version10.0.7 Editioncorporate
Symantec ≫ Antivirus Version10.0.8 Editioncorporate
Symantec ≫ Antivirus Version10.0.9 Editioncorporate
Symantec ≫ Antivirus Version10.1 Editioncorporate
Symantec ≫ Antivirus Version10.1 Updatemp1 Editioncorporate
Symantec ≫ Antivirus Version10.1 Updatemr4 Editioncorporate
Symantec ≫ Antivirus Version10.1 Updatemr5 Editioncorporate
Symantec ≫ Antivirus Version10.1 Updatemr6 Editioncorporate
Symantec ≫ Antivirus Version10.1 Updatemr7 Editioncorporate
Symantec ≫ Antivirus Version10.1.0.1 Editioncorporate
Symantec ≫ Antivirus Version10.1.4 Editioncorporate
Symantec ≫ Antivirus Version10.1.4.1 Editioncorporate
Symantec ≫ Antivirus Version10.1.5 Editioncorporate
Symantec ≫ Antivirus Version10.1.5.1 Editioncorporate
Symantec ≫ Antivirus Version10.1.6 Editioncorporate
Symantec ≫ Antivirus Version10.1.6.1 Editioncorporate
Symantec ≫ Antivirus Version10.1.7 Editioncorporate
Symantec ≫ Antivirus Version10.1.8 Editioncorporate
Symantec ≫ Antivirus Version10.1.9 Editioncorporate
Symantec ≫ Antivirus Version10.2 Editioncorporate
Symantec ≫ Antivirus Version10.2 Updatemr2 Editioncorporate
Symantec ≫ Antivirus Version10.2 Updatemr3 Editioncorporate
Symantec ≫ System Center Version10.0
Symantec ≫ System Center Version10.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.68% 0.845
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.