Published: 17/12/2014 Updated: 03/01/2017

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 656

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

The management console on the Symantec Web Gateway (SWG) appliance prior to 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts.

Vulnerable Product	Search on Vulmon	Subscribe to Product
symantec web gateway

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def initialize(info={}) super(update_info(info, 'Name' ...

Symantec Web Gateway versions 521 and below suffer from a remote OS command injection vulnerability ...

Towards the Detection of Inconsistencies in Public Security Vulnerability Reports

VIEM VIEM (short for Vulnerability Information Extraction Model) is a tool used for automatically extracting vulnerable software names and versions from unstructured reports It combines a Named Entity Recognition (NER) model and a Relation Extraction (RE) model The goal is to enable the possibility to continuously monitor different vulnerability reporting websites and periodi

try tool

VIEM VIEM (short for Vulnerability Information Extraction Model) is a tool used for automatically extracting vulnerable software names and versions from unstructured reports It combines a Named Entity Recognition (NER) model and a Relation Extraction (RE) model The goal is to enable the possibility to continuously monitor different vulnerability reporting websites and periodi

CWE-77 http://www.securityfocus.com/bid/71620 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141216_00 http://www.exploit-db.com/exploits/36263 http://packetstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.html http://karmainsecurity.com/KIS-2014-19 http://osvdb.org/show/osvdb/116009 http://www.securitytracker.com/id/1031386 https://nvd.nist.gov https://github.com/pinkymm/inconsistency_detection https://www.exploit-db.com/exploits/36263/

CVE-2014-7285

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect