CVE-2015-8799 - CVE House
Back to Database
Status published High CVE-2015-8799

Directory traversal vulnerability in the Management Server in Symantec Embedded...

Vulnerability Description

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to write update-package data to arbitrary agent locations via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-8799

Credits & Attribution

No credits recorded in the NVD database.

References

More from broadcom

View All →
CVE-2022-37049
The component tcpprep in Tcpreplay v4.4.1 was discovered to contain...
High 7.8
CVE-2022-37048
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain...
High 7.8
CVE-2022-37047
The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain...
High 7.8
CVE-2022-28487
Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums()...
High 7.5
CVE-2022-27942
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in...
High 7.8

Affected Vendor

Affected Software

symantec critical system protection, symantec data center security server, symantec data center security server and agents, symantec embedded security critical system protection, symantec embedded security critical system protection for controllers and devices
Vulnerable Versions:
0, 6.0.0, 6.5.0, 6.6.0

Timeline

Official Publish: June 8th, 2016
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.