CVE-2020-12593

HIGH

Symantec Endpoint Detection & Response <4.5 - Info Disclosure

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-12593. PoCs published by nasbench.

AI-analyzed exploit summary This repository provides a writeup for CVE-2020-12593, an information disclosure vulnerability in Symantec EDR on-prem versions prior to 4.5. The vulnerability allows unauthorized access to blacklist policies via a specific API endpoint.

Description

Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.

Exploits (1)

nomisec WRITEUP 1 stars

by nasbench · poc

https://github.com/nasbench/CVE-2020-12593

View Code ZIP pw:eip

This repository provides a writeup for CVE-2020-12593, an information disclosure vulnerability in Symantec EDR on-prem versions prior to 4.5. The vulnerability allows unauthorized access to blacklist policies via a specific API endpoint.

Classification

Writeup 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Symantec EDR on-prem < 4.5

No auth needed

Prerequisites: Network access to the vulnerable Symantec EDR server

MITRE ATT&CK

T1592 - Gather Victim Host Information

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562

Scores

CVSS v3 7.5

EPSS 0.0197

EPSS Percentile 78.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (1)

symantec/endpoint_detection_and_response < 4.5

Published Nov 18, 2020

Tracked Since Feb 18, 2026