CVE-2014-3437
First published: Fri Nov 07 2014(Updated: )
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Endpoint Protection | <=12.1.4 | |
| Symantec Endpoint Protection | =12.1.0 | |
| Symantec Endpoint Protection | =12.1.1 | |
| Symantec Endpoint Protection | =12.1.2 | |
| Symantec Endpoint Protection | =12.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/fulldisclosure/2014/Nov/7
- http://www.securityfocus.com/archive/1/533918/100/0/threaded
- http://www.securityfocus.com/bid/70843
- http://www.securitytracker.com/id/1031176
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98525
Frequently Asked Questions
What is the severity of CVE-2014-3437?
CVE-2014-3437 has a medium severity rating due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2014-3437?
To fix CVE-2014-3437, upgrade Symantec Endpoint Protection Manager to version 12.1.5 or later.
What are the risks associated with CVE-2014-3437?
The risks of CVE-2014-3437 include unauthorized file access and the possibility of sending malicious requests to internal servers.
Which versions of Symantec Endpoint Protection are affected by CVE-2014-3437?
CVE-2014-3437 affects Symantec Endpoint Protection Manager versions 12.1.0 through 12.1.4.
Can CVE-2014-3437 be exploited remotely?
Yes, CVE-2014-3437 can be exploited remotely by attackers to read files on the server.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/symantec
- canonical/symantec endpoint protection
- version/symantec endpoint protection/12.1.4
- version/symantec endpoint protection/12.1.0
- version/symantec endpoint protection/12.1.1
- version/symantec endpoint protection/12.1.2
- version/symantec endpoint protection/12.1.3