CVE-2014-3439

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.8%

from disclosure to weapon0 days

Published on NVDNov 7

1st PoCNov 6

exploitation probability

5.8%top 8% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/35181unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://seclists.org/fulldisclosure/2014/Nov/7 https://exchange.xforce.ibmcloud.com/vulnerabilities/98527 http://www.securityfocus.com/archive/1/533918/100/0/threaded http://www.securityfocus.com/bid/70845 http://www.securitytracker.com/id/1031176 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00