Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Endpoint Protection Client 竞争条件漏洞
Vulnerability Description
Symantec Endpoint Protection（SEP）是美国赛门铁克（Symantec）公司的一套防病毒软件。该软件可跨物理和虚拟系统提供安全防护功能。SEP Client是其中的客户端软件。 SEP Client 12.1版本的客户端中存在竞争条件漏洞。拥有本地访问权限的攻击者可通过在程序识别新的USB设备前实施文件系统操作利用该漏洞在未授权的USB设备中下载敏感文件，或从外部USB设备向本地系统上传任意文件。
CVSS Information
N/A
Vulnerability Type
N/A