CVE-2015-4523

9.3 criticalEPSS 4.5%

Critical (9.3) in symantec. EPSS 4.5% chance of exploitation in the next 30 days.

Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.

Severity

CVSS 3.0

9.3 critical

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-09-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

symantec:malware_analysis_appliance
symantec:malware_analyzer_g2

References

https://bto.bluecoat.com/security-advisory/sa97
https://bto.bluecoat.com/security-advisory/sa97

Check your stack JSON