CVE-2017-13681
mediumpriority · track · 31EPSS 0.004 · 37 %ileEUUSEPSS · scored 2026-10-28
Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the capability of exploit is limited by the need to perform multiple file and directory writes to the local filesystem and as such, is not feasible in a standard drive-by type attack.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- http://www.securitytracker.com/id/1039775cnnvd
- https://www.securityfocus.com/bid/101504cnnvd
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00cnnvd
- http://www.securityfocus.com/bid/101504enisa_euvd
- http://www.securitytracker.com/id/1039775enisa_euvd
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00enisa_euvd
- http://www.securityfocus.com/bid/101504Third Party AdvisoryVDB Entrynvd
- http://www.securitytracker.com/id/1039775Third Party AdvisoryVDB Entrynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan