Vulnerability Description
Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature.
CVSS Score
6.7
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Endpoint Protection | <= 14.2 |
Related Weaknesses (CWE)
References
- https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-andExploitThird Party Advisory
- https://support.symantec.com/us/en/article.SYMSA1488.htmlVendor Advisory
- https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-andExploitThird Party Advisory
- https://support.symantec.com/us/en/article.SYMSA1488.htmlVendor Advisory
FAQ
What is CVE-2019-12758?
CVE-2019-12758 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signatu...
How severe is CVE-2019-12758?
CVE-2019-12758 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-12758?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Endpoint Protection.