CVE-2013-5016

Severity CVSS v4.0:

Pending analysis

Type:

CWE-264 Permissions, Privileges, and Access Control

Publication date:

08/05/2014

Last modified:

12/04/2025

Description

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

Impact

Vector 2.0

AV:N/AC:H/Au:N/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 7.60 HIGH
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Attack Vector (AV): Network
Attack Complexity (AC): High
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete