critical9.8
CVE-2021-30648
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability.
Impact
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Symantec Proxysg | from 6.5 before 6.5.10.16 from 6.6 before 6.6.5.19 from 6.7 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway S200-30 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway S200-40 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway S400-20 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway S400-30 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway S400-40 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway 500-10 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |
| Broadcom | Symantec Advanced Secure Gateway S500-20 Firmware | from 6.6 before 6.7.4.17 from 6.7.5.0 before 6.7.5.12 from 7.2 before 7.2.7.2 from 7.3 before 7.3.3.3 |