Symantec Vulnerabilities and Affected Products
Vulnerabilities associated with Norton Mobile Security for Android.
Products
Clear product- IT Management Suite3 vulnerabilities
- Norton Mobile Security for Android3 vulnerabilities
- Endpoint Encryption2 vulnerabilities
- endpoint_protection_manager2 vulnerabilities
- Messaging Gateway2 vulnerabilities
- Symantec Messaging Gateway2 vulnerabilities
- Carbon Black Cloud Windows Sensor1 vulnerability
- Critical System Protection (CSP)1 vulnerability
- Data Loss Prevention1 vulnerability
- Deployment Solution1 vulnerability
- Encryption Desktop1 vulnerability
- Endpoint Detection and Response (SEDR)1 vulnerability
- Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client1 vulnerability
- Ghost Solution Suite1 vulnerability
- Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 3601 vulnerability
- Norton App Lock1 vulnerability
- Norton AppLock1 vulnerability
- Norton Download Manager1 vulnerability
- Norton Power Eraser1 vulnerability
- PC Tools Internet Security1 vulnerability
- Server Management Suite1 vulnerability
- server_management_suite1 vulnerability
- SONAR Component1 vulnerability
- Symantec Diagnostic Tool1 vulnerability
- Symantec Endpoint Encryption1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2016-6585MEDIUM | A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted JavaScript. CWE-20Jan 8, 2020 | CVSS5.3v3.1 | EPSS1.39% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2016-6587MEDIUM | An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information. CWE-200Jan 8, 2020 | CVSS5.5v3.1 | EPSS0.455% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist. CWE-20Jan 8, 2020 | CVSS3.7v3.1 | EPSS1.32% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |