CVE-2017-6331

🗓️ 06 Nov 2017 23:00:00Reported by symantecType

cve🔗 web.nvd.nist.gov👁 85 Views🌐 WEB

Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients

Reporter	Title	Published	Views	Family All 14
zdt	Symantec Endpoint Protection v12.1 / Tamper-Protection Bypass Exploit	12 Nov 201700:00	–	zdt
circl	CVE-2017-6331	10 Nov 201700:00	–	circl
cnvd	Symantec Endpoint Protection Tamper Protection Bypass Vulnerability	7 Nov 201700:00	–	cnvd
cvelist	CVE-2017-6331	6 Nov 201723:00	–	cvelist
exploitdb	Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass	10 Nov 201700:00	–	exploitdb
euvd	EUVD-2017-15392	7 Oct 202500:30	–	euvd
exploitpack	Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass	10 Nov 201700:00	–	exploitpack
nvd	CVE-2017-6331	6 Nov 201723:29	–	nvd
openvas	Symantec Endpoint Protection Security Bypass Vulnerability (SYM17-011)	8 Nov 201700:00	–	openvas
osv	CVE-2017-6331	6 Nov 201723:29	–	osv

NVD

Node

symantec endpoint_protectionRange<14.0

[
  {
    "product": "Symantec Endpoint Protection",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to SEP 14 RU1"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039775
exploit-db	www.exploit-db.com/exploits/43134/
securityfocus	www.securityfocus.com/bid/101502
symantec	www.symantec.com/security_response/securityupdates/detail.jsp

Parameter	Position	Path	Description	CWE
http://PWN3D.com/EVIL.exe	nested	PWN3D.com/EVIL.exe	UI tampering via spoofed messages to SEP UI demonstrated in POC code

17 Jun 2026 01:22Current

6.7Medium risk

Vulners AI Score6.7

CVSS 23.6

CVSS 3.17.1

EPSS0.01687