CVE-2021-30648
Estado: ModificadaCrítica (9.8)—
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.45%
- Percentil entre todas las CVEs puntuadas: 72
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (8)
Broadcom — Symantec Advanced Secure Gateway 500-10 FirmwareBroadcom — Symantec Advanced Secure Gateway S200-30 FirmwareBroadcom — Symantec Advanced Secure Gateway S200-40 FirmwareBroadcom — Symantec Advanced Secure Gateway S400-20 FirmwareBroadcom — Symantec Advanced Secure Gateway S400-30 FirmwareBroadcom — Symantec Advanced Secure Gateway S400-40 FirmwareBroadcom — Symantec Advanced Secure Gateway S500-20 FirmwareBroadcom — Symantec Proxysg
CWE
- CWE-287
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-30648",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 8.5,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "secure@symantec.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Advanced Secure Gateway (ASG) and ProxySG",
"versions": [
{
"status": "affected",
"version": "ASG 6.6, ASG 6.7 prior to 6.7.4.17 or 6.7.5.12, ASG 7.2 prior to 7.2.7.2, ASG 7.3 prior to 7.3.3.3, ProxySG 6.5 prior to 6.5.10.16, ProxySG 6.6 prior to 6.6.5.19, ProxySG 6.7 prior to 6.7.3.15, 6.7.4.17, or 6.7.5.12, ProxySG 7.2 prior 7.2.7.2, ProxySG 7.3 prior to 7.3.3.3."
}
]
}
]
}
],
"published": "2021-06-30T11:15:08.143",
"references": [
{
"url": "https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA18331",
"tags": [
"Vendor Advisory"
],
"source": "secure@symantec.com"
},
{
"url": "https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA18331",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance."
},
{
"lang": "es",
"value": "Las consolas de administración web Symantec Advanced Secure Gateway (ASG) y ProxySG son susceptibles a una vulnerabilidad de omisión de autenticación. Un atacante no autenticado puede ejecutar comandos CLI arbitrarios, ver/modificar la configuración y la política del dispositivo, y apagar/reiniciar el dispositivo"
}
],
"lastModified": "2026-06-17T03:50:37.210",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9672F60B-F28A-4343-9974-9959BD393AB9",
"versionEndExcluding": "6.5.10.16",
"versionStartIncluding": "6.5"
},
{
"criteria": "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A764833-E6F8-4D84-BE5F-951820DD656A",
"versionEndExcluding": "6.6.5.19",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD4B8490-8550-491B-A9CD-A52D8B79D155",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7"
},
{
"criteria": "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0050BA3-EFC3-48A6-8544-9E5DEF14A9CE",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DB1BDF4-A549-459D-9FB5-1AD6925453D8",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98CC3B7A-43FA-4D4F-9940-9511A9449076",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0D5D136-155C-4A46-904A-543645C53772",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD89FCD6-67B6-426A-AA80-E6A4D44B472A",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EDD9E31-19E6-437C-A32F-F01319497E19",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s200-30:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7607245C-D417-48D7-876D-1E859215F426"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3504045-02F1-48A7-900C-64A280BB5676",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B05AD57E-CACF-4D2C-B3A2-ABD24CB47A14",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73FC75E0-5D1F-49EC-9B6F-611AF94E8CE6",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s200-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AAD2096-A175-492D-A106-FCA726F742D9",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s200-40:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC9EBCDE-5890-4B9C-9B28-4BA6636320CF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "550B2E07-8330-43A1-8303-12EBD1EAA3CF",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05B177FF-1C17-4B44-A5E8-BC42C6A88BB8",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F549852-ED15-4FF7-9673-432E7BCEC615",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4F96BFC-1BA1-4E68-B60F-8F357BEEEBEA",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s400-20:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6C57BAE4-DCCC-427E-8C90-1D8586F836D9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DD66EC5-4990-4523-92EE-6259417EA29D",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5797A293-88B1-433E-BD59-0E43F3C105EA",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A43A9E1-CF92-4E19-8CEE-31719133A880",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-30_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D133BFF-FE7D-4698-A13B-A707A76D3317",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s400-30:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CFF36EA8-61F6-4D19-9AE1-AFF5EFDDC3E2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCD66B48-C227-4276-9D56-AA6AB7EB8C53",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F910A085-3911-44F3-A8B1-403EB2D00558",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0311A56B-D775-4507-A146-43E0E2C62D62",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s400-40_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46DE0E11-E74E-4CA2-923A-7E78FD331EA8",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s400-40:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DB67FB71-4979-4C89-A214-B1B8FAA1DBBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDE99D7E-341D-47CD-9CBB-A7815B9B98CA",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DDFA390-B788-45A3-BE77-131D2E265CF7",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "132FAE6F-1B32-4C66-8AFE-09A4CE823007",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_500-10_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14CAC3B2-1A9B-40C2-925C-5C929179763D",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_500-10:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44DFA806-C013-4C3A-A9AC-76040E5B4207"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31C3E999-E729-4B08-BFCD-2CACD14A9FAA",
"versionEndExcluding": "6.7.4.17",
"versionStartIncluding": "6.6"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "540E33CE-DB5D-4C45-806F-2A2B43EDDC11",
"versionEndExcluding": "6.7.5.12",
"versionStartIncluding": "6.7.5.0"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D17AC2E5-5CAE-49B9-BA56-B7DD2CA1A796",
"versionEndExcluding": "7.2.7.2",
"versionStartIncluding": "7.2"
},
{
"criteria": "cpe:2.3:o:broadcom:symantec_advanced_secure_gateway_s500-20_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D30543D-636C-4005-A677-A049FAF5534F",
"versionEndExcluding": "7.3.3.3",
"versionStartIncluding": "7.3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:broadcom:symantec_advanced_secure_gateway_s500-20:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9770558C-A91B-4DD1-B5A6-76713452116E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "secure@symantec.com"
}