Back to CVE Browser

CVE-2013-5016

HIGH

7.6

CVSS Severity Score

EPSS Score0.1920%

EPSS Percentile11.31th

PublishedMay 8, 2014

Last ModifiedMay 6, 2026

Vulnerability Description

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

Affected Platforms (CPE)

📦

Broadcom

Symantec Critical System Protection

<= 5.2.8

References & Advisories

🔗 http://www.securityfocus.com/bid/67161

🔗 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00

🔗 http://www.securityfocus.com/bid/67161

🔗 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00

Related Vulnerabilities

CVE-2019-183749.8

Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnera...

CVE-2014-34409.0

The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec D...

CVE-2015-81578.8

SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x bef...

CVE-2015-87988.0

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0...