Vulnerability Description
An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Security Analytics | >= 7.2, < 7.2.7 |
Related Weaknesses (CWE)
References
- https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMThird Party Advisory
- https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMThird Party Advisory
FAQ
What is CVE-2021-30642?
CVE-2021-30642 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arb...
How severe is CVE-2021-30642?
CVE-2021-30642 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-30642?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Security Analytics.