ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-30648

—
CVSS 3.1
9.8 critical
EPSS
1%p72
Published
()
Modified
Description

The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.

Vendors
broadcom
Products
symantec proxysg, symantec advanced secure gateway s200-30 firmware, symantec advanced secure gateway s200-40 firmware, symantec advanced secure gateway s400-20 firmware, symantec advanced secure gateway s400-30 firmware, symantec advanced secure gateway s400-40 firmware, symantec advanced secure gateway 500-10 firmware, symantec advanced secure gateway s500-20 firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news

No ingested article mentions this CVE yet.