CVE-2023-23958

Symantec Protection Engine Hash Leak Vulnerability

6.8 Medium

CVE-2023-23958 is a medium vulnerability (CVSS 6.8) in Symantec Protection Engine, published September 26, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.63%, the 50th percentile. No source names a fixed version.

What does this mean?

Severity: 6.8 MediumCVSS 3.1, CVE List
Exploit chance: 0.63%EPSS, 50th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: High
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.63%Up 0.6 points since Sep 27, 2023

Affected products

symantec protection engine

What each source reports

CVE List Score used6.8

Symantec Protection Engine Hash Leak Vulnerability

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

Record: CVE-2023-23958
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2023-280236.8

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

Record: EUVD-2023-28023
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Updated: 2026-11-03

GitHub AdvisoriesGHSA-f2mp-6hqr-p3mr6.8

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

Record: GHSA-f2mp-6hqr-p3mr
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

NVD6.8

Symantec Protection Engine, prior to 9.1.0, may be susceptible to a Hash Leak vulnerability.

Record: CVE-2023-23958
CVSS 3.1: 6.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases, published	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

Description

Attack profile

How easy it is to exploit

What an attacker can affect

Exploit likelihood

Affected products

What each source reports

History

References