What’s Vulnerable › Vulnerabilities

CVE-2012-0295

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-05-23 · updated 2026-06-16
• Weakness: CWE-94

Description

The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.

Affected products

• Symantec Endpoint Protection: 12.1, 12.1.671, 12.1.1000

References

• http://www.securityfocus.com/bid/53183
• http://www.securityfocus.com/bid/53184
• http://www.securitytracker.com/id?1027093
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01
• http://www.securityfocus.com/bid/53183
• http://www.securityfocus.com/bid/53184
• http://www.securitytracker.com/id?1027093
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01

Get alerted when CVE-2012-0295 or the next vulnerability affects your stack