
Symantec Endpoint Detection and Response (EDR) On-premise Industrial Control System Protection (ICSP)

The following products are not vulnerable:Ĭloud Workload Protection for Storage (CWP:S)ĬloudSOC Cloud Access Security Broker (CASB) Upgrade to 3.6.2.6, available on the Support Downloads portal. Upgrade to 14.3 RU4 and run LiveUpdate to download Symantec Endpoint Protection Manager API 14.3 RU4 content revision r16 or newer.Īpply the 6.9.1 b532 Server Update (Server_DCS691_b532.zip) available on the Support Downloads portal.Īpply the 8.0.2 b81 Server Update (SCSP_8.0.2_Server_Refresh.zip) available on the Support Downloads portal. The following products and product versions are affected.

When exploited, the vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system. Symantec is investigating CVE-2022-22965, aka Spring4Shell, which is an RCE vulnerability in the Spring Framework.
