Symantec Network Access Control vulnerabilities

2 CVEs affecting Symantec Network Access Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4349, published 2012-12-11.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-0289, published 2012-05-23. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and…
• CVE-2012-4349, published 2012-12-11. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors.