CVE-2007-2375

no score yetEPSS 5.4%

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

EPSS: 5.4% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2007-04-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

symantec:enterprise_security_manager

References

http://secunia.com/advisories/24767
http://www.securityfocus.com/bid/23287
http://www.securitytracker.com/id?1017881
http://www.symantec.com/avcenter/security/Content/2007.04.05d.html
http://www.vupen.com/english/advisories/2007/1277

Check your stack JSON