リモートホストにインストールされているSymantec Endpoint Protection（SEP）クライアントのバージョンは、14.2.5569.2100より前の14.xです。そのため、以下の複数の脆弱性の影響を受けます。

    - 権限昇格の脆弱性が存在します。An unauthenticated, remote attacker can exploit this to compromise the software application to gain elevated access to resources that are normally protected from an application or user. (CVE-2020-5820, CVE-2020-5822, CVE-2020-5823)

    - A DLL injection vulnerability exists. An unauthenticated, local attacker can exploit this to execute their own code in place of legitimate code as a means to perform an exploit. (CVE-2020-5821)	 
    - A denial of service (DoS) vulnerability exists. An unauthenticated, remote attacker can exploit this issue to make the application stop responding.(CVE-2020-5824)     
    - An arbitrary file write vulnerability exists. An unauthenticated, remote attacker can exploit this to overwrite existing files on the resident system without proper privileges. (CVE-2020-5825)

    - An out-of-bounds read error exists. An unauthenticated, remote attacker can exploit this to read memory outside of the bounds of the memory that had been allocated to the program. (CVE-2020-5826)

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

検出

Symantec Endpoint Protection Client 14.x < 14.2.5569.2100の複数の脆弱性（SYMSA1505）

high Nessus プラグイン ID 133675

変更ログが見つかりません