CVE-2013-5016

high

Published 2014-05-08 · Modified 2026-05-06

CVSS v3

—

CVSS v2

7.6

VIR risk

7.6

Description

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@symantec.com — http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00

Application impact

Vendor	Product	Versions	Fixed
broadcom	symantec_critical_system_protection	`{"endIncluding":"5.2.8"}`

References

http://www.securityfocus.com/bid/67161
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00
http://www.securityfocus.com/bid/67161
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140502_00

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.