CVE-2017-6331

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-11-06 · updated 2026-06-17

Description

Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that is run on servers and clients.

Affected products

Symantec Endpoint Protection: before 14.0 — fixed in 14.0

How to fix

Upgrade to a fixed version: Symantec Endpoint Protection 14.0. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/101502
http://www.securitytracker.com/id/1039775
https://www.exploit-db.com/exploits/43134/
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00
http://www.securityfocus.com/bid/101502
http://www.securitytracker.com/id/1039775
https://www.exploit-db.com/exploits/43134/
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171106_00

Get alerted when CVE-2017-6331 or the next vulnerability affects your stack