CVE-2021-30642

CRITICAL 9.8CVE-2021-30642 · Published 27/04/2021 · updated 17/06/2026

In short

CVE-2021-30642 is a CRITICAL (CVSS 9.8) vulnerability affecting security analytics (symantec).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.7% of all vulnerabilities.
Fix: update to 7.2.7, 8.1.3-nsr3, 8.2.2 or later.

Package	Affected versions	Patched versions
security analytics symantec	`≥ 7.2, < 7.2.7≥ 8.1, < 8.1.3-nsr3≥ 8.2, < 8.2.2`	`7.2.78.1.3-nsr38.2.2`

Description

An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.

References

support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA17969 · Third Party Advisory

More vulnerabilities in security analytics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free