VULNERABILITY INTELLIGENCE
CVE-2012-0295
CVSS score9.3 HIGH
EPSS probability3.98%
CISA KEVNot currently listed
Published2012-05-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')