What’s Vulnerable › Vulnerabilities
CVE-2015-4523
- Severity: critical (CVSS 9.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-09-11 · updated 2026-06-17
- Weakness: CWE-264
Description
Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.
Affected products
- Symantec Malware Analysis Appliance: through 4.2
- Symantec Malware Analyzer G2: through 3.5
References
Get alerted when CVE-2015-4523 or the next vulnerability affects your stack