Low severity2.9NVD Advisory· Published Jun 30, 2016· Updated Jun 17, 2026

CVE-2015-8801

Description

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.

Affected products

Symantec/Endpoint Protection Manager
cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*
Range: <=12.1.6
Symantec/Endpoint Protectionllm-fuzzy
Range: >=12.1, <RU6 MP5

Patches

Vulnerability mechanics

References

www.symantec.com/security_response/securityupdates/detail.jspnvdVendor Advisory
www.securityfocus.com/bid/91446nvd
www.securitytracker.com/id/1036196nvd

News mentions

No linked articles in our index yet.

cvss	0.189
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000