CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-30648
Critical (9.8) in broadcom. EPSS 1.4% chance of exploitation in the next 30 days.
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- broadcom:symantec_advanced_secure_gateway_500-10_firmware
- broadcom:symantec_advanced_secure_gateway_s200-30_firmware
- broadcom:symantec_advanced_secure_gateway_s200-40_firmware
- broadcom:symantec_advanced_secure_gateway_s400-20_firmware
- broadcom:symantec_advanced_secure_gateway_s400-30_firmware
- broadcom:symantec_advanced_secure_gateway_s400-40_firmware
- broadcom:symantec_advanced_secure_gateway_s500-20_firmware
- broadcom:symantec_proxysg