6.8

CVE-2016-10258

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Advanced Secure Gateway Version >= 6.6 < 6.6.5.14
Broadcom ≫ Advanced Secure Gateway Version >= 6.7 < 6.7.3.1
Broadcom ≫ Symantec Proxysg Version >= 6.5 < 6.5.10.8
Broadcom ≫ Symantec Proxysg Version >= 6.6 < 6.6.5.14
Broadcom ≫ Symantec Proxysg Version >= 6.7 < 6.7.3.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 10.46% 0.929
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 0.9 5.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

http://www.securityfocus.com/bid/103685
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040757
Third Party Advisory
VDB Entry