VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 1, 2013· Updated Jun 16, 2026

CVE-2013-4673

CVE-2013-4673

Description

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.

Affected products

9
  • Symantec/Web Gateway7 versions
    cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*range: <=5.1
    • cpe:2.3:a:symantec:web_gateway:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.3.18:*:*:*:*:*:*:*
    • (no CPE)range: <5.1.1
  • Symantec/Web Gateway Appliance 8450
    cpe:2.3:h:symantec:web_gateway_appliance_8450:-:*:*:*:*:*:*:*
  • Symantec/Web Gateway Appliance 8490
    cpe:2.3:h:symantec:web_gateway_appliance_8490:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.