CVE-2011-3478
Symantec pcAnywhere <12.5.3 - RCE
Title source: llmDescription
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by S2 Crew · pythonremotewindows
https://www.exploit-db.com/exploits/19407
exploitdb
WORKING POC
VERIFIED
by Tomislav Paskalev · pythonremotewindows_x86
https://www.exploit-db.com/exploits/38599
References (6)
Scores
EPSS
0.5290
EPSS Percentile
97.9%
Classification
CWE
CWE-287
Status
draft
Affected Products (8)
symantec/pcanywhere
symantec/pcanywhere
symantec/pcanywhere
symantec/pcanywhere
symantec/pcanywhere
symantec/pcanywhere
symantec/pcanywhere
symantec/pcanywhere
Timeline
Published
Jan 25, 2012
Tracked Since
Feb 18, 2026