CVE-2015-8154: Critical severity symantec endpoint protection vulnerability
Published Mar 18, 2016
·Updated
The SysPlant.sys driver in the Application and Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."
Affected Software
1 affected component
Symantec Endpoint Protection Manager<=12.1
Event History
Mar 18, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8154?
CVE-2015-8154 has a high severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2015-8154?
To fix CVE-2015-8154, upgrade to Symantec Endpoint Protection version 12.1 RU6-MP4 or later.
3
What systems are affected by CVE-2015-8154?
CVE-2015-8154 affects Symantec Endpoint Protection versions prior to 12.1 RU6-MP4.
4
What type of attack does CVE-2015-8154 facilitate?
CVE-2015-8154 facilitates remote code execution attacks via crafted HTML documents.
5
Which component of Symantec Endpoint Protection is vulnerable in CVE-2015-8154?
The SysPlant.sys driver in the Application and Device Control component is vulnerable in CVE-2015-8154.