CVE-2019-12750

EPSS 0.78%
Published 31.07.2019 18:15:10
Last modified 21.11.2024 04:23:29
Source secure@symantec.com
Teams watchlist Login
Open Login

Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Symantec ≫ Endpoint Protection Version11.0 Update-

Symantec ≫ Endpoint Protection Version11.0 Updatemr1

Symantec ≫ Endpoint Protection Version11.0 Updatemr2

Symantec ≫ Endpoint Protection Version11.0 Updatemr3

Symantec ≫ Endpoint Protection Version11.0 Updatemr4

Symantec ≫ Endpoint Protection Version11.0 Updatemr4-mp1a

Symantec ≫ Endpoint Protection Version11.0 Updatemr4-mp2

Symantec ≫ Endpoint Protection Version11.0 Updateru5

Symantec ≫ Endpoint Protection Version11.0 Updateru6

Symantec ≫ Endpoint Protection Version11.0 Updateru6-mp1

Symantec ≫ Endpoint Protection Version11.0 Updateru6-mp2

Symantec ≫ Endpoint Protection Version11.0 Updateru6-mp3

Symantec ≫ Endpoint Protection Version11.0 Updateru6a

Symantec ≫ Endpoint Protection Version11.0 Updateru7

Symantec ≫ Endpoint Protection Version11.0 Updateru7-mp1

Symantec ≫ Endpoint Protection Version11.0 Updateru7-mp2

Symantec ≫ Endpoint Protection Version11.0 Updateru7-mp3

Symantec ≫ Endpoint Protection Version11.0 Updateru7-mp4

Symantec ≫ Endpoint Protection Version11.0 Updateru7-mp4a

Symantec ≫ Endpoint Protection Version12.1 Update-

Symantec ≫ Endpoint Protection Version12.1 Updateru1

Symantec ≫ Endpoint Protection Version12.1 Updateru1-p1

Symantec ≫ Endpoint Protection Version12.1 Updateru2

Symantec ≫ Endpoint Protection Version12.1 Updateru2-mp1

Symantec ≫ Endpoint Protection Version12.1 Updateru3

Symantec ≫ Endpoint Protection Version12.1 Updateru4

Symantec ≫ Endpoint Protection Version12.1 Updateru4-mp1

Symantec ≫ Endpoint Protection Version12.1 Updateru4-mp1a

Symantec ≫ Endpoint Protection Version12.1 Updateru4-mp1b

Symantec ≫ Endpoint Protection Version12.1 Updateru4a

Symantec ≫ Endpoint Protection Version12.1 Updateru5

Symantec ≫ Endpoint Protection Version12.1 Updateru6

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp1

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp2

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp3

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp4

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp5

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp6

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp7

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp8

Symantec ≫ Endpoint Protection Version12.1 Updateru6-mp9

Symantec ≫ Endpoint Protection Version14.0.0 Update-

Symantec ≫ Endpoint Protection Version14.0.0 Updatemp1

Symantec ≫ Endpoint Protection Version14.0.0 Updatemp2

Symantec ≫ Endpoint Protection Version14.0.1 Update-

Symantec ≫ Endpoint Protection Version14.0.1 Updatemp1

Symantec ≫ Endpoint Protection Version14.0.1 Updatemp2

Symantec ≫ Endpoint Protection Version14.2 Update-

Symantec ≫ Endpoint Protection Version14.2 Updatemp1

Symantec ≫ Endpoint Protection Version12.0 Updatertm SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.0 Updateru1 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Update- SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru1 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru1-mp1 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru2 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru2-mp1 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru3 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru4 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru4-mp1 SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru4-mp1a SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru4-mp1b SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru4a SwEditionsmall_business

Symantec ≫ Endpoint Protection Version12.1 Updateru5 SwEditionsmall_business

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.78%	0.713

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://packetstormsecurity.com/files/155581/Symantec-Endpoint-Protection-Information-Disclosure-Privilege-Escalation.html

http://seclists.org/fulldisclosure/2019/Dec/11

http://seclists.org/fulldisclosure/2019/Dec/21

https://support.symantec.com/us/en/article.SYMSA1487.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-12750

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-12750

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-12750

EUVD