CVE-2012-4349: Symantec Network Access Control

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors.

Affected products

• Symantec Network Access Control: version 12.1 only; version 12.1.1 only; version 12.1.1.1 only

Published 2012-12-11. Last modified 2026-06-16.