What is the CVSS score of CVE-2013-1609?

CVE-2013-1609 has a CVSS 2.0 base score of 6.8 (Medium). CVSS vector: AV:L/AC:L/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.3%.

Enterprise Vault For File System Archiving CVE-2013-1609

MEDIUM

2013-03-26 secure@symantec.com

Hashicorp Information Disclosure Microsoft Enterprise Vault For File System Archiving

6.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:L/AC:L/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:S/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Mar 26, 2013 - 14:07 cve.org

MEDIUM 6.8

DescriptionCVE.org

Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program.

AnalysisAI

Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.