CVE-2022-37017
HIGHSymantec Endpoint Protection (Windows) <14.3 RU6/14.3 RU5 Patch 1 -...
Title source: llmDescription
Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.
Exploits (1)
References (1)
Core 1
Core References
Permissions Required, Vendor Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21014
Scores
CVSS v3
7.5
EPSS
0.0795
EPSS Percentile
92.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (1)
broadcom/symantec_endpoint_protection
< 14.3.5.1
Published
Dec 01, 2022
Tracked Since
Feb 18, 2026