CVE-2014-7285

Symantec Web Gateway <5.2.2 - Command Injection

Title source: llm

Description

The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotelinux

https://www.exploit-db.com/exploits/36263

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Egidio Romano, sinn3r · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_restore.rb

View Code ZIP pw:eip

References (7)

[Various Sources] http://karmainsecurity.com/KIS-2014-19

[Third Party Advisory, VDB Entry] http://osvdb.org/show/osvdb/116009

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1031386

[Vendor Advisory] http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141216_00

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/71620

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/36263

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.html

Scores

EPSS 0.7402

EPSS Percentile 98.8%

Details

CWE

CWE-77

Status published

Products (1)

symantec/web_gateway < 5.2.1

Published Dec 17, 2014

Tracked Since Feb 18, 2026