CVE Vulnerabilities

CVE-2020-5825

Published: Feb 11, 2020 | Modified: Jul 21, 2021
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an arbitrary file write vulnerability, which is a type of issue whereby an attacker is able to overwrite existing files on the resident system without proper privileges.

Affected Software

Name Vendor Start Version End Version
Endpoint_protection Symantec 11.0 (including) 11.0 (including)
Endpoint_protection Symantec 11.0-mr1 (including) 11.0-mr1 (including)
Endpoint_protection Symantec 11.0-mr2 (including) 11.0-mr2 (including)
Endpoint_protection Symantec 11.0-mr3 (including) 11.0-mr3 (including)
Endpoint_protection Symantec 11.0-mr4 (including) 11.0-mr4 (including)
Endpoint_protection Symantec 11.0-mr4-mp1a (including) 11.0-mr4-mp1a (including)
Endpoint_protection Symantec 11.0-mr4-mp2 (including) 11.0-mr4-mp2 (including)
Endpoint_protection Symantec 11.0-ru5 (including) 11.0-ru5 (including)
Endpoint_protection Symantec 11.0-ru6 (including) 11.0-ru6 (including)
Endpoint_protection Symantec 11.0-ru6-mp1 (including) 11.0-ru6-mp1 (including)
Endpoint_protection Symantec 11.0-ru6-mp2 (including) 11.0-ru6-mp2 (including)
Endpoint_protection Symantec 11.0-ru6-mp3 (including) 11.0-ru6-mp3 (including)
Endpoint_protection Symantec 11.0-ru6a (including) 11.0-ru6a (including)
Endpoint_protection Symantec 11.0-ru7 (including) 11.0-ru7 (including)
Endpoint_protection Symantec 11.0-ru7-mp1 (including) 11.0-ru7-mp1 (including)
Endpoint_protection Symantec 11.0-ru7-mp2 (including) 11.0-ru7-mp2 (including)
Endpoint_protection Symantec 11.0-ru7-mp3 (including) 11.0-ru7-mp3 (including)
Endpoint_protection Symantec 11.0-ru7-mp4 (including) 11.0-ru7-mp4 (including)
Endpoint_protection Symantec 11.0-ru7-mp4a (including) 11.0-ru7-mp4a (including)
Endpoint_protection Symantec 12.1 (including) 12.1 (including)
Endpoint_protection Symantec 12.1-ru1 (including) 12.1-ru1 (including)
Endpoint_protection Symantec 12.1-ru1-p1 (including) 12.1-ru1-p1 (including)
Endpoint_protection Symantec 12.1-ru2 (including) 12.1-ru2 (including)
Endpoint_protection Symantec 12.1-ru2-mp1 (including) 12.1-ru2-mp1 (including)
Endpoint_protection Symantec 12.1-ru3 (including) 12.1-ru3 (including)
Endpoint_protection Symantec 12.1-ru4 (including) 12.1-ru4 (including)
Endpoint_protection Symantec 12.1-ru4-mp1 (including) 12.1-ru4-mp1 (including)
Endpoint_protection Symantec 12.1-ru4-mp1a (including) 12.1-ru4-mp1a (including)
Endpoint_protection Symantec 12.1-ru4-mp1b (including) 12.1-ru4-mp1b (including)
Endpoint_protection Symantec 12.1-ru4a (including) 12.1-ru4a (including)
Endpoint_protection Symantec 12.1-ru5 (including) 12.1-ru5 (including)
Endpoint_protection Symantec 12.1-ru6 (including) 12.1-ru6 (including)
Endpoint_protection Symantec 12.1-ru6-mp1 (including) 12.1-ru6-mp1 (including)
Endpoint_protection Symantec 12.1-ru6-mp2 (including) 12.1-ru6-mp2 (including)
Endpoint_protection Symantec 12.1-ru6-mp3 (including) 12.1-ru6-mp3 (including)
Endpoint_protection Symantec 12.1-ru6-mp4 (including) 12.1-ru6-mp4 (including)
Endpoint_protection Symantec 12.1-ru6-mp5 (including) 12.1-ru6-mp5 (including)
Endpoint_protection Symantec 12.1-ru6-mp6 (including) 12.1-ru6-mp6 (including)
Endpoint_protection Symantec 12.1-ru6-mp7 (including) 12.1-ru6-mp7 (including)
Endpoint_protection Symantec 12.1-ru6-mp8 (including) 12.1-ru6-mp8 (including)
Endpoint_protection Symantec 12.1-ru6-mp9 (including) 12.1-ru6-mp9 (including)
Endpoint_protection Symantec 14.0.0 (including) 14.0.0 (including)
Endpoint_protection Symantec 14.0.0-mp1 (including) 14.0.0-mp1 (including)
Endpoint_protection Symantec 14.0.0-mp2 (including) 14.0.0-mp2 (including)
Endpoint_protection Symantec 14.0.1 (including) 14.0.1 (including)
Endpoint_protection Symantec 14.0.1-mp1 (including) 14.0.1-mp1 (including)
Endpoint_protection Symantec 14.0.1-mp2 (including) 14.0.1-mp2 (including)
Endpoint_protection Symantec 14.2 (including) 14.2 (including)
Endpoint_protection Symantec 14.2-mp1 (including) 14.2-mp1 (including)
Endpoint_protection Symantec 14.2-ru1 (including) 14.2-ru1 (including)
Endpoint_protection Symantec 14.2-ru1_mp1 (including) 14.2-ru1_mp1 (including)
Endpoint_protection Symantec 14.2-ru2 (including) 14.2-ru2 (including)

References