Norton Power Eraser CVE-2019-19548 Local Privilege Escalation Vulnerability

Description

Norton Power Eraser is prone to a local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Versions prior to Norton Power Eraser Prior to 5.3.0.67 are vulnerable.

Technologies Affected

• Symantec Norton Power Eraser (NPE) 2.0.0.52
• Symantec Norton Power Eraser (NPE) 5.1
• Symantec Norton Power Eraser (NPE) 5.3.0.20
• Symantec Norton Power Eraser (NPE) 5.3.0.24

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Permit access to systems for trusted and accountable individuals only.

Updates are available. Please see the references or vendor advisory for more information.