Read the docs
TI-2012-03703 Aliases CVE-2012-4348GHSA-58f6-frpv-8mvh

The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1…

Priority LOW 34CWE-20Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Why it matters now

EPSS 0.01161 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*11.0VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:*:*:*11.0 ru5VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:*11.0 ru6VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:*:*:*11.0 ru6aVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*11.0 ru6mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp2:*:*:*:*:*:*11.0 ru6mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.1:*:*:*:*:*:*:*11.0.1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp1:*:*:*:*:*:*11.0.1 mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp2:*:*:*:*:*:*11.0.1 mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.2:*:*:*:*:*:*:*11.0.2VulnerableSymantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:*:*:* Versions 11.0 ru5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:* Versions 11.0 ru6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:*:*:* Versions 11.0 ru6a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:* Versions 11.0 ru6mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp2:*:*:*:*:*:* Versions 11.0 ru6mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.1:*:*:*:*:*:*:* Versions 11.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp1:*:*:*:*:*:* Versions 11.0.1 mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp2:*:*:*:*:*:* Versions 11.0.1 mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·Symantec
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp1:*:*:*:*:*:*11.0.2 mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp2:*:*:*:*:*:*11.0.2 mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.4:*:*:*:*:*:*:*11.0.4VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp1a:*:*:*:*:*:*11.0.4 mp1aVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp2:*:*:*:*:*:*11.0.4 mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.3001:*:*:*:*:*:*:*11.0.3001VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.6000:*:*:*:*:*:*:*11.0.6000VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.6100:*:*:*:*:*:*:*11.0.6100VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.6200:*:*:*:*:*:*:*11.0.6200VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.6200.754:*:*:*:*:*:*:*11.0.6200.754VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.6300:*:*:*:*:*:*:*11.0.6300VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.7000:*:*:*:*:*:*:*11.0.7000VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0.7100:*:*:*:*:*:*:*11.0.7100VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:*:*:*12.1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1.671:*:*:*:*:*:*:*12.1.671VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1.1000:*:*:*:*:*:*:*12.1.1000VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.0:-:small_business:*:*:*:*:*12.0VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:-:small_business:*:*:*:*:*12.1VulnerableSymantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp1:*:*:*:*:*:* Versions 11.0.2 mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp2:*:*:*:*:*:* Versions 11.0.2 mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.4:*:*:*:*:*:*:* Versions 11.0.4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp1a:*:*:*:*:*:* Versions 11.0.4 mp1a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp2:*:*:*:*:*:* Versions 11.0.4 mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.3001:*:*:*:*:*:*:* Versions 11.0.3001 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.6000:*:*:*:*:*:*:* Versions 11.0.6000 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.6100:*:*:*:*:*:*:* Versions 11.0.6100 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.6200:*:*:*:*:*:*:* Versions 11.0.6200 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.6200.754:*:*:*:*:*:*:* Versions 11.0.6200.754 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.6300:*:*:*:*:*:*:* Versions 11.0.6300 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.7000:*:*:*:*:*:*:* Versions 11.0.7000 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0.7100:*:*:*:*:*:*:* Versions 11.0.7100 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1.671:*:*:*:*:*:*:* Versions 12.1.671 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1.1000:*:*:*:*:*:*:* Versions 12.1.1000 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.0:-:small_business:*:*:*:*:* Versions 12.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:-:small_business:*:*:*:*:* Versions 12.1 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4348
  2. 2026-10-03 Alias added: GHSA-58f6-frpv-8mvh

References

Other 1

  • TI-2009-01353 The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2)… CVSS 2.0HIGH 10.0
  • TI-2009-01354 Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in… CVSS 2.0HIGH 9.3
  • TI-2016-02020 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 7.8
  • TI-2012-01284 The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus… CVSS 2.0MEDIUM 4.3
  • TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
  • TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
See all 70 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences