Lucene search

[email protected]CVE-2013-4673

HistoryAug 01, 2013 - 1:32 p.m.

CVE-2013-4673

2013-08-0113:32:00

CWE-20

[email protected]

web.nvd.nist.gov

symantec

web gateway

swg

appliance

remote code execution

radius authentication

cve-2013-4673

7.8 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.034 Low

EPSS

Percentile

91.4%

JSON

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.

CPENameOperatorVersion
symantec:web_gatewaysymantec web gatewayle5.1
symantec:web_gatewaysymantec web gatewayeq5.0
symantec:web_gatewaysymantec web gatewayeq5.0.1
symantec:web_gatewaysymantec web gatewayeq5.0.2
symantec:web_gatewaysymantec web gatewayeq5.0.3
symantec:web_gatewaysymantec web gatewayeq5.0.3.18
symantec:web_gateway_appliance_8450symantec web gateway appliance 8450eq-
symantec:web_gateway_appliance_8490symantec web gateway appliance 8490eq-

CPE	Name	Operator	Version
symantec:web_gateway	symantec web gateway	le	5.1
symantec:web_gateway	symantec web gateway	eq	5.0
symantec:web_gateway	symantec web gateway	eq	5.0.1
symantec:web_gateway	symantec web gateway	eq	5.0.2
symantec:web_gateway	symantec web gateway	eq	5.0.3
symantec:web_gateway	symantec web gateway	eq	5.0.3.18
symantec:web_gateway_appliance_8450	symantec web gateway appliance 8450	eq	-
symantec:web_gateway_appliance_8490	symantec web gateway appliance 8490	eq	-

References

osvdb.org/95702

www.securityfocus.com/bid/61105

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00

exchange.xforce.ibmcloud.com/vulnerabilities/85990

7.8 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

0.034 Low

EPSS

Percentile

91.4%

JSON

Related for CVE-2013-4673

cvelist1 prion1 nessus1 symantec1