CVE-2012-0295

Description

The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

5.243

Associated Vulnerability

Vulnerability	OS Platform
Update Symantec Endpoint Protection (x64) 12.1 to latest version	Windows
Update Symantec Endpoint Protection (x64) 12.1.1000 to latest version	Windows
Update Symantec Endpoint Protection (x64) 12.1.671 to latest version	Windows
Update Symantec Endpoint Protection 12.1 to latest version	Windows
Update Symantec Endpoint Protection 12.1.1000 to latest version	Windows
Update Symantec Endpoint Protection 12.1.671 to latest version	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234