CVE-2018-12238

N/A

Published: November 29, 2018 at 02:00 PM UTC

Updated: June 17, 2026 at 01:37 AM UTC

4 products affected across 1 vendorEndpoint ProtectionNorton AntivirusEndpoint Protection Cloud

Using Norton; Symantec Endpoint Protection (SEP); Symantec Endpoint Protection Small Business Edition (SEP SBE); Symantec Endpoint Protection Cloud (SEP Cloud) by Symantec Corporation?

Get instant alerts when new vulnerabilities affect Norton; Symantec Endpoint Protection (SEP); Symantec Endpoint Protection Small Business Edition (SEP SBE); Symantec Endpoint Protection Cloud (SEP Cloud) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.4%

Description

Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Endpoint Protection · Symantec

95%

v < 12.1.7454.7000v < 22.15v < 22.15.111.0 ≤ v < 12.1.7454.700014.0 ≤ v ≤ 14.2Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)]

Affected range stops below 12.1.7454.7000, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15.1, so it looks safe — our inference, not a vendor statement

Endpoint Protection Cloud · Symantec

95%

v < 12.1.7454.7000v < 22.15v < 22.15.1Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)]

Affected range stops below 12.1.7454.7000, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15.1, so it looks safe — our inference, not a vendor statement

Norton Antivirus · Symantec

95%

v < 12.1.7454.7000v < 22.15v < 22.15.1Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)]

Affected range stops below 12.1.7454.7000, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15.1, so it looks safe — our inference, not a vendor statement

Endpoint Protection Small Business Edition · Symantec

60%

v < 12.1.7454.7000v < 22.15v < 22.15.1Prior to NIS-22.15.1.8 & SEP-12.1.7454.7000 [Symantec Endpoint Protection Small Business Edition (SEP SBE)]

Affected range stops below 12.1.7454.7000, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.15.1, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html

References (2)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/105917

x_refsource_CONFIRMMitigationVendor Advisory

Source: [email protected]

https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html

CVSS

4.6MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card