High severity · published Jan 8, 2020
CVE-2016-6590
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7,…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Encryption Desktop · Symantec
10.0.0 before 10.4.1 · source: NVD
EE
Endpoint Encryption · Symantec
7.0 before 7.6; 7.6 · source: NVD
GS
Ghost Solution Suite · Symantec
3.1; 3.1; 3.1; 3.1 · source: NVD
IM
IT Management Suite · Symantec
7.6; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6590
Third Party Advisory
http://www.securityfocus.com/bid/94279
Third Party Advisory
http://www.securitytracker.com/id/1037302
Vendor Advisory
https://support.symantec.com/us/en/article.symsa1385.html
More from Encryption Desktop
6.5
CVE-2017-6330
Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests."
5.7
CVE-2017-13682
In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory…
4.2
CVE-2017-13679
A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to…
–
CVE-2014-3436
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory…
–
CVE-2014-3431
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to…