CVE-2014-7285 The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scr...
MediumCVSS 6.5
EPSS 50.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec web gateway | <= 5.2.1 | No fix listed |
References
- karmainsecurity.com
- 116009 vdb-entry
- packetstormsecurity.com
- 36263 exploit
- 71620 vdb-entry
- 1031386 vdb-entry
- www.symantec.com vendor-advisory