VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 1, 2013· Updated Apr 29, 2026

CVE-2013-4673

CVE-2013-4673

Description

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.

Affected products

8
  • Symantec/Web Gateway6 versions
    cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:symantec:web_gateway:*:*:*:*:*:*:*:*range: <=5.1
    • cpe:2.3:a:symantec:web_gateway:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:web_gateway:5.0.3.18:*:*:*:*:*:*:*
  • Symantec/Web Gateway Appliance 8450
    cpe:2.3:h:symantec:web_gateway_appliance_8450:-:*:*:*:*:*:*:*
  • Symantec/Web Gateway Appliance 8490
    cpe:2.3:h:symantec:web_gateway_appliance_8490:-:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.