NVD

Id
28850  
Name
CVE-2015-8800  
Description
Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allow remote authenticated users to conduct argument-injection attacks by leveraging certain named-pipe access.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-06-08  
Modified Date
2016-06-10  
Seq
2015-8800  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
151955 28850 CVE-2015-8800 90886  View
151956 28850 CVE-2015-8800 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2303 JVNDB-2016-003076 複数の Symantec 製品における引数インジェクション攻撃を実行される脆弱性 複数の Symantec 製品には、引数インジェクション攻撃を実行される脆弱性が存在します。 CVE-2015-8800 86025 CVE-2015-8800 28850 4.9 7.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003076.html 2016-06-07 2016-06-13 View