CVE-2017-13680 - Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system

Back Back to CVE browser

MEDIUM

Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system

Published Nov 6, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 0.39%

Description

Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby an attacker could use the product's UI to perform unauthorized file deletes on the resident file system.

Affected products

Vendor Symantec Corporation Product Symantec Endpoint Protection Default
n/a
- Version
  Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Symantec Corporation

Symantec Endpoint Protection

n/a

Version	Status	Constraints
Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/bid/101503
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039775
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00
x_refsource_CONFIRMIssue TrackingVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/101503		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039775		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00		x_refsource_CONFIRMIssue TrackingVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Nov 6, 2017

Updated Sep 16, 2024

Reserved Aug 24, 2017

Link CVE-2017-13680

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-13680

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-13680