CVE-2014-7285
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 50%
from disclosure to weapon77 days
Published on NVDDec 17
1st PoC+77d
metasploitDec 16
exploitation probability
50%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencepacketstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.htmlunverifiedcve_referencewww.exploit-db.com/exploits/36263unverifiedexploitdbwww.exploit-db.com/exploits/36263unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://karmainsecurity.com/KIS-2014-19http://osvdb.org/show/osvdb/116009http://packetstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.htmlhttp://www.exploit-db.com/exploits/36263http://www.securityfocus.com/bid/71620http://www.securitytracker.com/id/1031386http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141216_00