CVE-2013-5014 in the critical feed json
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symant…
published 2014-02-14 12 y ago modified 2026-06-16 4 mo ago also EUVD-2013-4856
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 67.6%
- EPSS 67.6% chance of exploitation in 30 days, percentile 99.3%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Timeline
- Published
- First public exploit (EDB-31853)
Exploit prediction
67.57% chance of exploitation in the next 30 days, higher than 99.3% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/windows/antivirus/symantec_endpoint_manager_rce Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution metasploit exploit, excellent rank, 2014-02-24
- EDB-31917 Symantec Endpoint Protection Manager - Remote Command Execution (Metasploit) remote, 2014-02-26
- EDB-31853 Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution remote, 2014-02-23
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
exploit-db.com
/exploits/31853
exploit
-
exploit-db.com
/exploits/31917
exploit
-
symantec.com
/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213
vendor-advisory
- sec-consult.com /fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerab
-
securityfocus.com
/bid/65466
vdb-entry
Sources
- CVE List CVE-2013-5014
- NVD CVE-2013-5014
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.