exploit/windows/http/sepm_auth_bypass_rce

weaponized

Symantec Endpoint Protection Manager Authentication Bypass and Code Execution

view exploit source metasploittype exploitpublished 2015-07-31catalog metasploit

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-1489US	high8.5	25.4% (98th)	Exploit	2015-08-01
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.
CVE-2015-1487US	medium5.5	52.0% (99th)	Exploit	2015-08-01
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtai…
CVE-2015-1486US	high7.5	68.3% (99th)	Exploit	2015-08-01
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.