APP: Symantec Web Gateway OS Command Injection

This signature detects attempts to exploit a known vulnerability against Symantec Web Gateway. A successful attack can lead to arbitrary code execution.

Extended Description

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script.

Short Name
APP:SYMC:WEB-GATEWAY-OS-CMD-INJ
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
CVE-2013-1616 Command Gateway Injection OS Symantec Web bid:61106
Release Date
08/07/2013
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3761
False Positive
Unknown
CVSS Score

8.3

Found a potential security threat?