Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-3439. PoCs published by SEC Consult.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Symantec Endpoint Protection, including XXE for file disclosure and SSRF, XSS for session hijacking, and arbitrary file write/overwrite for DoS or potential code execution. The PoC includes detailed steps and code snippets for each vulnerability.
Description
ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in Symantec Endpoint Protection, including XXE for file disclosure and SSRF, XSS for session hijacking, and arbitrary file write/overwrite for DoS or potential code execution. The PoC includes detailed steps and code snippets for each vulnerability.