CVE-2021-30648

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2021-30648
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:C

Exploitability : 10.0 / Impact : 8.5

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact COMPLETE

References
Link Resource
https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA18331 Vendor Advisory
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s200-30:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s200-40:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s400-20:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s400-30:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s400-40:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_500-10:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s500-20:-:*:*:*:*:*:*:*
Information

Published : 2021-06-30 04:15

Updated : 2021-07-06 08:14

NVD link : CVE-2021-30648

Mitre link : CVE-2021-30648

JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa
Products Affected

broadcom

  • symantec_advanced_secure_gateway_s200-30_firmware
  • symantec_advanced_secure_gateway_s400-40_firmware
  • symantec_advanced_secure_gateway_500-10_firmware
  • symantec_advanced_secure_gateway_s200-30
  • symantec_advanced_secure_gateway_s400-20_firmware
  • symantec_advanced_secure_gateway_s200-40_firmware
  • symantec_advanced_secure_gateway_s200-40
  • symantec_advanced_secure_gateway_s500-20
  • symantec_advanced_secure_gateway_s400-30
  • symantec_advanced_secure_gateway_s400-40
  • symantec_advanced_secure_gateway_s400-20
  • symantec_proxysg
  • symantec_advanced_secure_gateway_500-10
  • symantec_advanced_secure_gateway_s500-20_firmware
  • symantec_advanced_secure_gateway_s400-30_firmware