CVE-2017-13681 - CVE House
Back to Database
Status published High CVE-2017-13681

Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could...

Vulnerability Description

Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-13681

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Symantec Corporation

View all reports →

Affected Software

Symantec Endpoint Protection
Vulnerable Versions:
Prior to SEP 12.1 RU6 MP9

Timeline

Official Publish: November 6th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.