CVE-2020-5828

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5828

CVE-2020-5828 affects Symantec Endpoint Protection Manager (SEPM) prior to 14.2 RU2 MP1, with an out-of-bounds vulnerability (read beyond allocated memory). ZDI details indicate it enables a local attacker who has code execution privileges to achieve an information disclosure by reading memory ou...

CVE-2020-5827

CVE-2020-5827 affects Symantec Endpoint Protection Manager (SEPM) prior to 14.2 RU2 MP1. The issue is an out-of-bounds read vulnerability, with sources describing an attack path in which an unauthenticated or low-privilege scenario could disclose memory contents or be leveraged alongside other fl...

CVE-2020-5827

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5826

Summary: CVE-2020-5826 affects Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, with an out-of-bounds vulnerability that can cause the application to read memory outside allocated bounds. Technical details:...

CVE-2020-5826

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory...

CVE-2020-5825

CVE-2020-5825 affects Symantec Endpoint Protection (SEP) and SEP SBE prior to 14.2 RU2 MP1 (14.2.5569.2100). It is an arbitrary file write vulnerability allowing overwriting of existing files without proper privileges (local access). Remediation is to upgrade to SEP/SEP SBE 14.2 RU2 MP1 (14.2.556...

CVE-2020-5825

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an arbitrary file write vulnerability, which is a type of issue whereby an attacker is able to overwrite existing...

CVE-2020-5824

CVE-2020-5824 affects Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) pre-14.2 RU2 MP1 and pre-14.2.5569.2100, respectively. It is a Denial of Service vulnerability that can exhaust resources and render certain functions unavailable. Connected advisories also reference...

CVE-2020-5824

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a denial of service vulnerability, which is a type of issue whereby a threat actor attempts to tie up the resourc...

CVE-2020-5823

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the...

CVE-2020-5823

Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) before 14.2 RU2 MP1 (SEP) and before 14.2.5569.2100 (SEP SBE) are affected by a privilege-escalation vulnerability. Exploitation would allow local attackers to gain elevated access. Remediation is to upgrade to SEP 14.2 R...

CVE-2020-5822

Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) are affected by CVE-2020-5822, a local privilege-escalation vulnerability in SEP/SEP SBE prior to 14.2 RU2 MP1 (14.2.5569.2100). The issue is associated with the ccSvc.dll component and allows a local attacker to gain ele...

CVE-2020-5822

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the...

CVE-2020-5821

Symantec Endpoint Protection (SEP) and SEP SBE on Windows are affected by a DLL injection vulnerability (CVE-2020-5821) in versions prior to 14.2 RU2 MP1 (SEP) and prior to 14.2.5569.2100 (SEP SBE). The issue allows an attacker to run code in place of legitimate code; impact is high across confid...

CVE-2020-5821

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a DLL injection vulnerability, which is a type of issue whereby an individual attempts to execute their own code ...

CVE-2020-5820

CVE-2020-5820 affects Symantec Endpoint Protection (SEP) and SEP Small Business Edition (SEP SBE) prior to 14.2 RU2 MP1 (and 14.2.5569.2100, respectively). The connected advisories describe a privilege escalation vulnerability rooted in insufficient validation within components used by SEP/SEP SB...

CVE-2020-5820

Symantec Endpoint Protection SEP and Symantec Endpoint Protection Small Business Edition SEP SBE, prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the...

Symantec Endpoint Protection AvHostPlugin Missing Authentication Arbitrary File Move Vulnerability

This vulnerability allows local attackers to move arbitrary files on affected installations of Symantec Endpoint Protection. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...