Vulnerability Description
Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Malware Analysis Appliance | <= 4.2 |
| Symantec | Malware Analyzer G2 | <= 3.5 |
Related Weaknesses (CWE)
References
- https://bto.bluecoat.com/security-advisory/sa97Third Party Advisory
- https://bto.bluecoat.com/security-advisory/sa97Third Party Advisory
FAQ
What is CVE-2015-4523?
CVE-2015-4523 is a vulnerability with a CVSS score of 9.3 (CRITICAL). Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause...
How severe is CVE-2015-4523?
CVE-2015-4523 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2015-4523?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Malware Analysis Appliance, Symantec Malware Analyzer G2.