CVE-2015-4523

Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.

CVSS v3 9.3 CRITICAL
CVSS v2.0 9.0 HIGH

9.3^/10

CVSS v3 : CRITICAL

Vector : AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability : 2.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:C

Exploitability : 10.0 / Impact : 8.5

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact COMPLETE

References

Link	Resource
https://bto.bluecoat.com/security-advisory/sa97	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:symantec:malware_analysis_appliance::::::::
	cpe:2.3:a:symantec:malware_analyzer_g2::::::::

History

No history.

Information

Published : 2017-09-11 17:29

Updated : 2024-02-28 16:04

NVD link : CVE-2015-4523

Mitre link : CVE-2015-4523

CVE.ORG link : CVE-2015-4523

JSON object : View

Products Affected

symantec

malware_analysis_appliance
malware_analyzer_g2

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-4523", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 8.5, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.3, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.5}]}, "published": "2017-09-11T17:29:00.200", "references": [{"url": "https://bto.bluecoat.com/security-advisory/sa97", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis."}, {"lang": "es", "value": "Blue Coat Malware Analysis Appliance (MAA) en versiones anteriores a la 4.2.5 y Malware Analyzer G2 permiten a los atacantes remotos omitir un mecanismo de protecci\u00f3n de m\u00e1quinas virtuales y, como consecuencia, modificar archivos arbitrarios, provocar una denegaci\u00f3n de servicio (reinicio del host o restauraci\u00f3n a valores de f\u00e1brica) o ejecutar c\u00f3digo arbitrario mediante vectores relacionados con el guardado de archivos durante un an\u00e1lisis."}], "lastModified": "2018-10-03T18:06:13.657", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec:malware_analysis_appliance:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "464E1783-2C46-4AE1-8F8A-72CCCF148931", "versionEndIncluding": "4.2"}, {"criteria": "cpe:2.3:a:symantec:malware_analyzer_g2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5823299D-DC25-40E3-997C-1454BD83FD35", "versionEndIncluding": "3.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}