Vulnerability Details CVE-2018-12238
Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.6%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
Products affected by CVE-2018-12238
-
cpe:2.3:a:symantec:endpoint_protection:11.0
-
cpe:2.3:a:symantec:endpoint_protection:11.0.1
-
cpe:2.3:a:symantec:endpoint_protection:11.0.2
-
cpe:2.3:a:symantec:endpoint_protection:11.0.3001
-
cpe:2.3:a:symantec:endpoint_protection:11.0.4
-
cpe:2.3:a:symantec:endpoint_protection:11.0.6000
-
cpe:2.3:a:symantec:endpoint_protection:11.0.6100
-
cpe:2.3:a:symantec:endpoint_protection:11.0.6200
-
cpe:2.3:a:symantec:endpoint_protection:11.0.6200.754
-
cpe:2.3:a:symantec:endpoint_protection:11.0.6300
-
cpe:2.3:a:symantec:endpoint_protection:11.0.7
-
cpe:2.3:a:symantec:endpoint_protection:11.0.7.1
-
cpe:2.3:a:symantec:endpoint_protection:11.0.7.2
-
cpe:2.3:a:symantec:endpoint_protection:11.0.7.3
-
cpe:2.3:a:symantec:endpoint_protection:11.0.7000
-
cpe:2.3:a:symantec:endpoint_protection:11.0.7100
-
cpe:2.3:a:symantec:endpoint_protection:12.0
-
cpe:2.3:a:symantec:endpoint_protection:12.0.1001.95
-
cpe:2.3:a:symantec:endpoint_protection:12.0.122.192
-
cpe:2.3:a:symantec:endpoint_protection:12.1
-
cpe:2.3:a:symantec:endpoint_protection:12.1.1
-
cpe:2.3:a:symantec:endpoint_protection:12.1.1.1
-
cpe:2.3:a:symantec:endpoint_protection:12.1.1000
-
cpe:2.3:a:symantec:endpoint_protection:12.1.1000.157
-
cpe:2.3:a:symantec:endpoint_protection:12.1.1101.401
-
cpe:2.3:a:symantec:endpoint_protection:12.1.2
-
cpe:2.3:a:symantec:endpoint_protection:12.1.2.1
-
cpe:2.3:a:symantec:endpoint_protection:12.1.2015.2015
-
cpe:2.3:a:symantec:endpoint_protection:12.1.2100.2093
-
cpe:2.3:a:symantec:endpoint_protection:12.1.3
-
cpe:2.3:a:symantec:endpoint_protection:12.1.3001.165
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4.1
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4.1a
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4.1b
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4013.4013
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4023.4080
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4100.4126
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4104.4130
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4112.4156
-
cpe:2.3:a:symantec:endpoint_protection:12.1.4a
-
cpe:2.3:a:symantec:endpoint_protection:12.1.5
-
cpe:2.3:a:symantec:endpoint_protection:12.1.5337.5000
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6168.6000
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6306.6100
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6318.6100
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6465.6200
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6608.6300
-
cpe:2.3:a:symantec:endpoint_protection:12.1.671
-
cpe:2.3:a:symantec:endpoint_protection:12.1.671.4971
-
cpe:2.3:a:symantec:endpoint_protection:12.1.6867.6400
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7004.6500
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7061.6600
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7166.6700
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7266.6800
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7369.6900
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7384.6902
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7385.6902
-
cpe:2.3:a:symantec:endpoint_protection:12.1.7445.7000
-
cpe:2.3:a:symantec:endpoint_protection:14.0
-
cpe:2.3:a:symantec:endpoint_protection:14.0.0
-
cpe:2.3:a:symantec:endpoint_protection:14.0.1
-
cpe:2.3:a:symantec:endpoint_protection:14.2
-
cpe:2.3:a:symantec:endpoint_protection_cloud:*
-
cpe:2.3:a:symantec:norton_antivirus:-
-
cpe:2.3:a:symantec:norton_antivirus:1.0
-
cpe:2.3:a:symantec:norton_antivirus:10.0
-
cpe:2.3:a:symantec:norton_antivirus:10.0.0
-
cpe:2.3:a:symantec:norton_antivirus:10.0.0.359
-
cpe:2.3:a:symantec:norton_antivirus:10.0.1
-
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1000
-
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1007
-
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1008
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2000
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2001
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2002
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2010
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2011
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2020
-
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021
-
cpe:2.3:a:symantec:norton_antivirus:10.1
-
cpe:2.3:a:symantec:norton_antivirus:2.0
-
cpe:2.3:a:symantec:norton_antivirus:2.1
-
cpe:2.3:a:symantec:norton_antivirus:2.18_build_83
-
cpe:2.3:a:symantec:norton_antivirus:2.5
-
cpe:2.3:a:symantec:norton_antivirus:5.0
-
cpe:2.3:a:symantec:norton_antivirus:8.0.1
-
cpe:2.3:a:symantec:norton_antivirus:8.0.1.501
-
cpe:2.3:a:symantec:norton_antivirus:8.01.434
-
cpe:2.3:a:symantec:norton_antivirus:8.01.437
-
cpe:2.3:a:symantec:norton_antivirus:8.01.446
-
cpe:2.3:a:symantec:norton_antivirus:8.01.457
-
cpe:2.3:a:symantec:norton_antivirus:8.01.460
-
cpe:2.3:a:symantec:norton_antivirus:8.01.464
-
cpe:2.3:a:symantec:norton_antivirus:8.01.471
-
cpe:2.3:a:symantec:norton_antivirus:8.1
-
cpe:2.3:a:symantec:norton_antivirus:8.1.0.825a
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1.319
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1.323
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1.329
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1.366
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1.377
-
cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a
-
cpe:2.3:a:symantec:norton_antivirus:9.0
-
cpe:2.3:a:symantec:norton_antivirus:9.0.0
-
cpe:2.3:a:symantec:norton_antivirus:9.0.0.338
-
cpe:2.3:a:symantec:norton_antivirus:9.0.1
-
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000
-
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000
-
cpe:2.3:a:symantec:norton_antivirus:9.0.2
-
cpe:2.3:a:symantec:norton_antivirus:9.0.2.1000
-
cpe:2.3:a:symantec:norton_antivirus:9.0.3
-
cpe:2.3:a:symantec:norton_antivirus:9.0.3.1000
-
cpe:2.3:a:symantec:norton_antivirus:9.0.4
-
cpe:2.3:a:symantec:norton_antivirus:9.0.5
-
cpe:2.3:a:symantec:norton_antivirus:9.0.5.1100
-
cpe:2.3:a:symantec:norton_antivirus:9.0.6.1000