CVE-2015-6547

Symantec Web Gateway < 5.2.2 - Authenticated Remote Code Execution

Title source: llm

Description

The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033625

Vendor Advisory x_refsource_confirm

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/76730

Scores

EPSS 0.0326

EPSS Percentile 87.3%

Details

CWE

CWE-77

Status published

Products (1)

symantec/web_gateway < 5.2.2

Published Sep 20, 2015

Tracked Since Feb 18, 2026