CVE-2021-30648
moderate-risk
Published 2021-06-30
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.
Do I need to act?
-
0.49% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (8)
Symantec Proxysg
Symantec Advanced Secure Gateway S200-30 Firmware
Symantec Advanced Secure Gateway S200-40 Firmware
Symantec Advanced Secure Gateway S400-20 Firmware
Symantec Advanced Secure Gateway S400-30 Firmware
Symantec Advanced Secure Gateway S400-40 Firmware
Symantec Advanced Secure Gateway 500-10 Firmware
Symantec Advanced Secure Gateway S500-20 Firmware
Affected Vendors
References (2)
48
/ 100
moderate-risk
Severity
32/34 · Critical
Exploitability
2/34 · Minimal
Exposure
14/34 · Moderate