What’s Vulnerable › Vulnerabilities

CVE-2020-5828

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-11 · updated 2026-06-17
• Weakness: CWE-125

Description

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.

Affected products

• Symantec Endpoint Protection Manager (SEPM): before 14.2; 14.2, 14.2-mp1, 14.2-ru1, 14.2-ru1-mp1, 14.2-ru2 — fixed in 14.2

How to fix

Upgrade to a fixed version: Symantec Endpoint Protection Manager (SEPM) 14.2. Check the vendor advisory for mitigations.

References

• https://support.symantec.com/us/en/article.SYMSA1505.html
• https://support.symantec.com/us/en/article.SYMSA1505.html

Get alerted when CVE-2020-5828 or the next vulnerability affects your stack