CVE-2013-4673
Published Aug 1, 2013
Last updated 7 years ago
Overview
- Description
- The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.
- Source
- secure@symantec.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5.8
- Impact score
- 6.4
- Exploitability score
- 6.5
- Vector string
- AV:A/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B2BB75F-9AB3-4A27-993C-BD2077F4F3A9",
"versionEndIncluding": "5.1"
},
{
"criteria": "cpe:2.3:a:symantec:web_gateway:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F5B7857-75D5-4F77-81BF-7B55F743FD5F"
},
{
"criteria": "cpe:2.3:a:symantec:web_gateway:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4525DE38-3B1F-490C-A772-BA0456FB6126"
},
{
"criteria": "cpe:2.3:a:symantec:web_gateway:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3956706B-44B9-40BC-9AAB-78A9583A2858"
},
{
"criteria": "cpe:2.3:a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E5B2ABA-234A-43B1-8D91-33255F85AA26"
},
{
"criteria": "cpe:2.3:a:symantec:web_gateway:5.0.3.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6286A061-2426-48A5-BCA2-CAB90D3B7406"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:symantec:web_gateway_appliance_8450:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4A72858-FBDC-4587-AC69-0BFA99031F92"
},
{
"criteria": "cpe:2.3:h:symantec:web_gateway_appliance_8490:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9149CE42-E9F2-4778-8E79-3E1960F813D3"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]