Unscored severity · published Dec 11, 2012
CVE-2012-4349
Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors
–
CVSS
0.5%
EPSS
No
On KEV
Description
Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Network Access Control · Symantec
12.1; 12.1.1; 12.1.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4349
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4349
www.securityfocus.com
http://www.securityfocus.com/bid/56847
www.securitytracker.com
http://www.securitytracker.com/id?1027864
www.symantec.com
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00
More from Network Access Control
–
CVE-2012-0289
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain…