CVE:CVE-2015-8800
CNNVD:CNNVD-201606-204
Symantec Embedded Security:Critical System Protection（SES:CSP）和Symantec Data Center Security: Server Advanced（SDCS:SA）都是美国赛门铁克（Symantec）公司的安全产品。SES:CSP是一款轻量级的入侵检测和防御系统客户端产品；SDCS:SA为软件定义数据中心的物理和虚拟服务器提供了安全防护。 
SES:CSP和SDCS:SA中存在安全漏洞。远程攻击者可利用该漏洞以‘命名管道写入/读取权限’注入任意参数，绕过代理中的安全保护机制。以下版本受到影响：SES:CSP 1.0.x版本，6.5.0版本，DCS:SA 6.0.x版本，6.5.x版本，6.6版本，6.6 MP1版本，SCSP 5.2.9及之前版本。
solution:Upgrade broadcom symantec_critical_system_protection to a higher version than 5.2.9,and avoid the version 5.2.9; Upgrade broadcom symantec_data_center_security_server to a higher version than 6.5.0,6.6.0,and avoid the version 6.5.0,6.6.0; Upgrade broadcom symantec_data_center_security_server_and_agents to a higher version than 6.6.0,and avoid the version 6.6.0; Upgrade broadcom symantec_embedded_security_critical_system_protection to a higher version than 1.0,and avoid the version 1.0; Upgrade broadcom symantec_embedded_security_critical_system_protection_for_controllers_and_devices to a higher version than 6.5.0,and avoid the version 6.5.0