VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 27, 2021· Updated Jun 17, 2026

CVE-2021-30642

CVE-2021-30642

Description

An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Symantec/Security Analytics2 versions
    cpe:2.3:a:symantec:security_analytics:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:symantec:security_analytics:*:*:*:*:*:*:*:*range: >=7.2,<7.2.7
    • (no CPE)range: <7.2.7, <8.1.3-NSR3, <8.2.1-NSR2, <8.2.2
  • Symantec/Security Analytics web UIdescription
  • Broadcom Corporation/Symantec Security Analyticsllm-fuzzy
    Range: <7.2.7, <8.1.3-NSR3, <8.2.1-NSR2, <8.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.