Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6548 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:27.302Z Vendors: Zizai Technology Products: Tech Nut Mobile Application Problem Types: CWE-200 Description: The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse the session token to gain full access the user's account. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/93877 - https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ - https://www.kb.cert.org/vuls/id/4
log.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ - https://www.kb.cert.org/vuls/id/402847
CVE ID: CVE-2016-6549 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:27.291Z Vendors: Zizai Technology Products: Tech Nut Problem Types: CWE-306 Description: The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/93877 - https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ - https://www.kb.cert.org/vuls/id/402847
CVE ID: CVE-2016-6550 State: PUBLISHED Published: 2016-10-05T01:00:00 Last Updated: 2024-08-06T01:36:27.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The U by BB&T app 1.5.4 and earlier for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93259 - http://www.kb.cert.org/vuls/id/338624
CVE ID: CVE-2016-6551 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.535Z Vendors: Intellian Satellite TV Products: Antennas Problem Types: CWE-255 Description: Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93808 - https://www.kb.cert.org/vuls/id/200907
CVE ID: CVE-2016-6552 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.513Z Vendors: Green Packet Products: WiFi Access Point Problem Types: CWE-255 Description: Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/93806 - https://www.kb.cert.org/vuls/id/970379
CVE ID: CVE-2016-6553 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.498Z Vendors: Nuuo Products: NT-4040 Titan Problem Types: CWE-255 Description: Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/326395 - http://www.securityfocus.com/bid/93807
CVE ID: CVE-2016-6554 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.402Z Vendors: Synology Products: NAS server DS107, NAS server DS116, NAS server DS213 Problem Types: CWE-255 Description: Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A remote network attacker can gain privileged access to a vulnerable device. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/en-global/releaseNote/DS213 - https://www.securityfocus.com/bid/93805 - https://www.kb.cert.org/vuls/id/404187
CVE ID: CVE-2016-6555 State: PUBLISHED Published: 2022-06-15T18:35:43.500923Z Last Updated: 2024-09-17T01:41:54.993Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: OpenNMS Products: OpenNMS Problem Types: CWE-79 Description: OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in version 18.0.2, released on September 20, 2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post
on September 20, 2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post/2016/11/15/r7-2016-24-opennms-stored-xss-via-snmp-cve-2016-6555-cve-2016-6556/ - https://github.com/OpenNMS/opennms/pull/1019
CVE ID: CVE-2016-6556 State: PUBLISHED Published: 2022-06-15T18:35:47.512689Z Last Updated: 2024-09-16T16:43:02.484Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: OpenNMS Products: OpenNMS Problem Types: CWE-79 Description: OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This issue was fixed in version 18.0.2, released on September 20, 2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.r
n 18.0.2, released on September 20, 2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post/2016/11/15/r7-2016-24-opennms-stored-xss-via-snmp-cve-2016-6555-cve-2016-6556/ - https://github.com/OpenNMS/opennms/pull/1019
CVE ID: CVE-2016-6557 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.591Z Vendors: ASUS Products: RP-AC52 Access Point Problem Types: CWE-352 Description: In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/93596 - https://www.kb.cert.org
Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/93596 - https://www.kb.cert.org/vuls/id/763843
CVE ID: CVE-2016-6558 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.511Z Vendors: ASUS Products: RP-AC52 Access Point Problem Types: CWE-77 Description: A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The action_script parameter specifies a script to be executed if the action_mode parameter does not contain a valid state. If the input provided by action_script does not match one of the hard coded options, then it will be executed as the argument of either a system() or an eval() call allowing arbitrary commands
ed options, then it will be executed as the argument of either a system() or an eval() call allowing arbitrary commands to be executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/93596 - https://www.kb.cert.org/vuls/id/763843
CVE ID: CVE-2016-6559 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:29.410Z Vendors: BSD Products: libc library Problem Types: CWE-120 Description: Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depends on the method of exploit and how the library is used by applications. According to analysis by FreeBSD developers, it is very unlikely that applications exist that utilize link_ntoa() in an exploitable manner, and the CERT/CC is not aware of any proof of concept. A blog post describes the functionality of link_ntoa()
ble manner, and the CERT/CC is not aware of any proof of concept. A blog post describes the functionality of link_ntoa() and points out that none of the base utilities use this function in an exploitable manner. For more information, please see FreeBSD Security Advisory SA-16:37. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037398 - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:37.libc.asc - https://www.kb.cert.org/vuls/id/548487 - https://www.securityfocus.com/bid/94694
CVE ID: CVE-2016-6560 State: PUBLISHED Published: 2017-03-31T19:00:00 Last Updated: 2024-08-06T01:36:28.157Z Vendors: illumos Products: osnet-incorporation Problem Types: CWE-195 Description: illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.illumos.org/issues/7488 - https://github.com/illumos/illumos-gate/commit/5aaab1a49679c26dbcb6fb6dc25799950d70cc71 - https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/
CVE ID: CVE-2016-6561 State: PUBLISHED Published: 2017-03-31T19:00:00 Last Updated: 2024-08-06T01:36:28.435Z Vendors: illumos Products: osnet-incorporation Problem Types: CWE-476 Description: illumos smbsrv NULL pointer dereference allows system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.illumos.org/issues/7483 - https://www.openindiana.org/2016/11/01/cve-2016-6560-cve-2016-6561-security-issues-in-illumos/ - https://github.com/illumos/illumos-gate/commit/6d1c73b5858fefc6161c7d686345f0dc887ea799 - http://www.securityfocus.com/bid/98079
CVE ID: CVE-2016-6562 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.149Z Vendors: ShoreTel Products: Mobility Client iOS, Mobility Client Andoid Problem Types: CWE-295 Description: On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.info-sec.ca/advisories/ShoreTel-Mobility.html - https://www.kb.cert.org/vuls/id/475907 - https://www.sec
: - https://www.info-sec.ca/advisories/ShoreTel-Mobility.html - https://www.kb.cert.org/vuls/id/475907 - https://www.securityfocus.com/bid/95224
CVE ID: CVE-2016-6563 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.095Z Vendors: D-Link Products: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, DIR-850L Problem Types: CWE-121 Description: Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L. Additional Analyst Notes: - CVE Program Container: References: - https
890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40805/ - https://www.kb.cert.org/vuls/id/677427 - http://www.securityfocus.com/bid/94130 - http://seclists.org/fulldisclosure/2016/Nov/38
CVE ID: CVE-2016-6564 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.064Z Vendors: Ragentek Products: Android software Problem Types: CWE-494 Description: Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this binary. This behavior could be described as a rootkit. This binary, which resides as /system/bin/debugs, runs with root privileges and does not communicate over an encrypted channel. The binary has been shown to communicate with three hosts via HTTP: oyag[.]lhzbdvm[.]com oyag[.]prugskh[.]net oyag[.]prugskh[.]com S
as been shown to communicate with three hosts via HTTP: oyag[.]lhzbdvm[.]com oyag[.]prugskh[.]net oyag[.]prugskh[.]com Server responses to requests sent by the debugs binary include functionalities to execute arbitrary commands as root, install applications, or update configurations. Examples of a request sent by the client binary: POST /pagt/agent?data={"name":"c_regist","details":{...}} HTTP/1. 1 Host: 114.80.68.223 Connection: Close An example response from the server could be: HTTP/1.1 200 OK {"code": "01", "name": "push_commands", "details": {"server_id": "1" , "title": "Test Command", "comments": "Test", "commands": "touch /tmp/test"}} This binary is reported to be present in the follo
: "Test Command", "comments": "Test", "commands": "touch /tmp/test"}} This binary is reported to be present in the following devices: BLU Studio G BLU Studio G Plus BLU Studio 6.0 HD BLU Studio X BLU Studio X Plus BLU Studio C HD Infinix Hot X507 Infinix Hot 2 X510 Infinix Zero X506 Infinix Zero 2 X509 DOOGEE Voyager 2 DG310 LEAGOO Lead 5 LEAGOO Lead 6 LEAGOO Lead 3i LEAGOO Lead 2S LEAGOO Alfa 6 IKU Colorful K45i Beeline Pro 2 XOLO Cube 5.0 Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/624539 - https://www.bitsighttech.com/blog/ragentek-android-ota-update-mechanism-vulnerable-to-mitm-attack - https://www.securityfocus.com/bid/94393/
CVE ID: CVE-2016-6565 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.098Z Vendors: Imagely Products: NextGen Gallery plugin Problem Types: CWE-98 Description: The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some circumstances (dependent on server configuration). Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/94356/ - https://www.kb.cert.org/vuls/id/346175
CVE ID: CVE-2016-6566 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.063Z Vendors: Sungard Products: eTRAKiT3 Problem Types: CWE-89 Description: The valueAsString parameter inside the JSON payload contained by the ucLogin_txtLoginId_ClientStat POST parameter of the Sungard eTRAKiT3 software version 3.2.1.17 is not properly validated. An unauthenticated remote attacker may be able to modify the POST request and insert a SQL query which may then be executed by the backend server. eTRAKiT 3.2.1.17 was tested, but other versions may also be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/846103 - http
lnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/846103 - http://www.securityfocus.com/bid/94696
CVE ID: CVE-2016-6567 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:28.808Z Vendors: SHDesigns Products: Resident Download Manager, Ethernet Download Manager Problem Types: CWE-494 Description: SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executing code and deploying the firmware to devices. A remote attacker with the ability to send UDP traffic to the device may be able to execute arbitrary code on the device. Accordi
attacker with the ability to send UDP traffic to the device may be able to execute arbitrary code on the device. According to SHDesigns' website, the Resident Download Manager and other Rabbit Tools have been discontinued since June 2011. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/167623 - http://www.securityfocus.com/bid/95898
CVE ID: CVE-2016-6578 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T01:36:27.966Z Vendors: CodeLathe Products: FileCloud Problem Types: CWE-352 Description: CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95426 - https://www.kb.cert.org/vuls/id/865216
CVE ID: CVE-2016-6579 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-6580 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:36:28.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily continue to store the priority information for each stream, and would therefore allocate unbounded amounts of memory. Attempting to actually use a tree like this would also cause extremely high CPU usage to maintain the tree. Additional Analyst Notes: - CVE Program Container
e this would also cause extremely high CPU usage to maintain the tree. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92311 - https://python-hyper.org/priority/en/latest/security/CVE-2016-6580.html
CVE ID: CVE-2016-6581 State: PUBLISHED Published: 2017-01-10T15:00:00 Last Updated: 2024-08-06T01:36:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK dynamic header table into the dynamic header table. The attacker can then send a header block that is simply repeated requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, m
requests to expand that field in the dynamic table. This can lead to a gigantic compression ratio of 4,096 or better, meaning that 16kB of data can decompress to 64MB of data on the target machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92315 - https://python-hyper.org/hpack/en/latest/security/CVE-2016-6581.html
CVE ID: CVE-2016-6582 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:36:28.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92551 - http://packetstormsecurity.com/files/138430/Doorkeeper-4.1.0-Token-Revocation.html - http://www.securityfocus.com/archive/1/539268/100/0/threaded - http://seclists.org/fulldisclosure/2016/Aug/105 - https://github.com/doork
tyfocus.com/archive/1/539268/100/0/threaded - http://seclists.org/fulldisclosure/2016/Aug/105 - https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v4.2.0 - https://github.com/doorkeeper-gem/doorkeeper/issues/875
CVE ID: CVE-2016-6585 State: PUBLISHED Published: 2020-01-08T18:17:46 Last Updated: 2024-08-06T01:36:28.303Z Vendors: Symantec Products: Norton Mobile Security for Android Problem Types: denial of service Description: A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted JavaScript. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93900 - http://www.securitytracker.com/id/1037225 - https://support.symantec.com/us/en/article.symsa1384.html
CVE ID: CVE-2016-6586 State: PUBLISHED Published: 2020-01-08T16:51:32 Last Updated: 2024-08-06T01:36:28.512Z Vendors: Symantec Products: Norton Mobile Security for Android Problem Types: Security Bypass Vulnerability Description: A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037225 - http://www.securityfocus.com/bid/93901 - https://support.symantec.com/us/en/article.symsa1384.html
CVE ID: CVE-2016-6587 State: PUBLISHED Published: 2020-01-08T17:03:29 Last Updated: 2024-08-06T01:36:28.039Z Vendors: Symantec Products: Norton Mobile Security for Android Problem Types: Local Information Disclosure Vulnerability Description: An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037225 - http://www.securityfocus.com/bid/93858 - https://support.symantec.com/us/en/article.symsa1384.html - https://vuldb.com/?id.93273
CVE ID: CVE-2016-6588 State: PUBLISHED Published: 2020-01-08T16:13:13 Last Updated: 2024-08-06T01:36:28.224Z Vendors: Symantec Products: IT Management Suite Problem Types: XSS Description: A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93952 - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161031_00 - https://support.symantec.com/us/en/article.symsa1383.html
CVE ID: CVE-2016-6589 State: PUBLISHED Published: 2020-01-08T15:55:08 Last Updated: 2024-08-06T01:36:28.254Z Vendors: Symantec Products: IT Management Suite Problem Types: denial of service Description: A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161031_00 - http://www.securityfocus.com/bid/93951 - https://support.symantec.com/us/en/article.symsa1383.html