5.8
CVE-2013-4673
- EPSS 0.83%
- Published 01.08.2013 13:32:21
- Last modified 11.04.2025 00:51:21
- Source secure@symantec.com
- Teams watchlist Login
- Open Login
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.
Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Web Gateway Version <= 5.1
Symantec ≫ Web Gateway Version5.0
Symantec ≫ Web Gateway Version5.0.1
Symantec ≫ Web Gateway Version5.0.2
Symantec ≫ Web Gateway Version5.0.3
Symantec ≫ Web Gateway Version5.0.3.18
Symantec ≫ Web Gateway Appliance 8450 Version-
Symantec ≫ Web Gateway Appliance 8490 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.83% | 0.723 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 6.5 | 6.4 |
AV:A/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.