Symantec Critical System Protection CVE-2013-5016

HIGH

Permissions, Privileges, and Access Controls (CWE-264)

2014-05-08 secure@symantec.com

Privilege Escalation Microsoft Symantec Critical System Protection

7.6

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:H/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

High

Confidentiality

C

Integrity

C

Availability

C

Lifecycle Timeline

1

CVE Published

May 08, 2014 - 10:55 cve.org

HIGH 7.6

DescriptionCVE.org

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

AnalysisAI

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors. Affected products include: Broadcom Symantec Critical System Protection. Version information: before 5.2.9.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Symantec Critical System Protection

View all

CVE-2014-9226 HIGH This Week POC

The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security:

CVE-2014-7289 MEDIUM This Month POC

SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and

CVE-2014-9225 MEDIUM This Month POC

The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symante

CVE-2019-18374 CRITICAL Act Now

Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypa

CVE-2014-3440 CRITICAL Act Now

The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and

CVE-2015-8157 HIGH This Week

SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP)

CVE-2015-8798 HIGH This Week

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SE

CVE-2014-9224 LOW Monitor POC

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management serve

CVE-2015-8799 HIGH This Week

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SE

CVE-2015-8800 HIGH This Week

Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical Syste

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all

CVE-2013-0422 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

CVE-2015-7709 CRITICAL POC

CVE-2014-0514 CRITICAL POC

CVE-2013-6955 CRITICAL POC

CVE-2012-0299 CRITICAL POC

Same technique Privilege Escalation

View all

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

Share

CVE-2013-5016 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy