Lucene search

XICVE-2024-23616

HistoryJan 26, 2024 - 12:15 a.m.

CVE-2024-23616

2024-01-2600:15:08

CWE-119

CWE-120

web.nvd.nist.gov

symantec

server management suite

cve

buffer overflow

vulnerability

remote code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

A buffer overflow vulnerability exists in Symantec Server Management Suite version 7.9 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.

Affected configurations

Nvd

Node

broadcomsymantec_server_management_suiteRange≤7.9

VendorProductVersionCPE
broadcomsymantec_server_management_suite*cpe:2.3:a:broadcom:symantec_server_management_suite:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	symantec_server_management_suite	*	cpe:2.3:a:broadcom:symantec_server_management_suite::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Server Management Suite",
    "vendor": "Symantec",
    "versions": [
      {
        "lessThanOrEqual": "7.9",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

blog.exodusintel.com/2024/01/25/symantec-server-management-suite-axengine-exe-buffer-overflow-remote-code-execution/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

Related for CVE-2024-23616