CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2020-25502
https://notcve.org/view.php?id=CVE-2020-25502
Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges. Cybereason EDR versión 19.1.282 y superior, 19.2.182 y superior, 20.1.343 y superior, y 20.2.X y superior tienen una vulnerabilidad de secuestro de DLL, que podría permitir a un atacante local ejecutar código con privilegios elevados. • http://cybereason.com http://endpoint.com https://www.cybereason.com/cybereason-vulnerability-disclosure • CWE-427: Uncontrolled Search Path Element •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-37015
https://notcve.org/view.php?id=CVE-2022-37015
Symantec Endpoint Detection and Response (SEDR) Appliance, prior to 4.7.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. El dispositivo Symantec Endpoint Detection and Response (SEDR), anterior a 4.7.0, puede ser susceptible a una vulnerabilidad de escalada de privilegios, que es un tipo de problema por el cual un atacante puede intentar comprometer la aplicación de software para obtener acceso elevado a recursos que normalmente son protegido de una aplicación o usuario. • https://support.broadcom.com/external/content/SecurityAdvisories/0/21005 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-12593
https://notcve.org/view.php?id=CVE-2020-12593
Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. Symantec Endpoint Detection & Response, versiones anteriores a 4.5, puede ser susceptible a un problema de divulgación de información, que es un tipo de vulnerabilidad que podría permitir un acceso no autorizado a datos • https://github.com/nasbench/CVE-2020-12593 https://support.broadcom.com/security-advisory/content/security-advisories/Symantec-Endpoint-Detection-Response-Security-Update/SYMSA16562 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2020-5839
https://notcve.org/view.php?id=CVE-2020-5839
Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. Symantec Endpoint Detection And Response, versiones anteriores a 4.4, puede ser susceptible a un problema de divulgación de información, que es un tipo de vulnerabilidad que podría permitir potencialmente un acceso no autorizado a datos • https://github.com/nasbench/CVE-2020-5839 https://support.broadcom.com/security-advisory/content/security-advisories/SEDR-Information-Disclosure/SYMSA16090 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2020-7287 – Privilege Escalation vulnerability in EDR for Linux
https://notcve.org/view.php?id=CVE-2020-7287
Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to. Una vulnerabilidad de Escalada de Privilegios en McAfee Exploit Detection and Response (EDR) para Linux versiones anteriores a 3.1.0, Hotfix 1, permite a un script o programa malicioso llevar a cabo funciones que al usuario ejecutor local no se le habían otorgado acceso. • https://kc.mcafee.com/corporate/index?page=content&id=SB10317 • CWE-269: Improper Privilege Management CWE-274: Improper Handling of Insufficient Privileges •