CVE-2018-18367

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-18367
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/107996 Third Party Advisory VDB Entry
https://support.symantec.com/en_US/article.SYMSA1479.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:symantec:endpoint_protection_manager:12.1:rtm:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1-mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2-mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru3:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1a:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1b:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4a:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru5:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1a:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp2:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp3:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp4:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp5:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp6:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp7:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp8:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp9:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14:mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14:mp2:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp1:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp2:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14.2:*:*:*:*:*:*:*
cpe:2.3:a:symantec:endpoint_protection_manager:14.2:mp1:*:*:*:*:*:*
History

No history.

Information

Published : 2019-04-25 20:29

Updated : 2019-05-03 13:18

NVD link : CVE-2018-18367

Mitre link : CVE-2018-18367

CVE.ORG link : CVE-2018-18367

JSON object : View

Products Affected

symantec

  • endpoint_protection_manager
CWE
CWE-426

Untrusted Search Path