← Vulnerability feed

Vulnerability record · CVE-2018-5243 · published 20 August 2018

CVE-2018-5243: Symantec encryption management server uncontrolled resource consumption vulnerability

Symantec · Encryption Management Server

The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.

7.5 CVSS 3.0 High EPSS 1.8% · top 22.5% CWE-400 · Uncontrolled resource consumption
7.5CVSS 3.0 base score, v2 5.0
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/105062 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041527 Third Party AdvisoryVDB Entry
https://support.symantec.com/en_US/article.SYMSA1458.html MitigationVendor Advisory
http://www.securityfocus.com/bid/105062 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041527 Third Party AdvisoryVDB Entry
https://support.symantec.com/en_US/article.SYMSA1458.html MitigationVendor Advisory

Track CVE-2018-5243 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2015-8151Symantec encryption management server os command injection vulnerabilitySymantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging conso…EPSS 1.6%9.0CVE-2014-7288Symantec encryption management server permissions and access controls vulnerabilitySymantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell …EPSS 8.1%7.8CVE-2015-8150Symantec encryption management server permissions and access controls vulnerabilitySymantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file.EPSS 0.28%7.5CVE-2015-8148Symantec encryption management server information exposure vulnerabilityThe LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about admi…EPSS 1.6%7.5CVE-2015-8149Symantec encryption management server memory buffer overflow vulnerabilityThe LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory …EPSS 1.7%5.0CVE-2014-7287Symantec encryption management server injection vulnerabilityThe key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger un…EPSS 1.1%4.3CVE-2013-4674Symantec encryption management server cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Univer…EPSS 0.89%4.0CVE-2014-1643Symantec encryption management server permissions and access controls vulnerabilityThe Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users…EPSS 0.75%

Source: NIST National Vulnerability Database (record CVE-2018-5243), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.