CVE:CVE-2021-30648
CNNVD:CNNVD-202106-1968
Symantec Advanced Secure Gateway和Symantec ProxySG都是美国赛门铁克（Symantec）公司的一款安全网关设备。
Symantec Advanced Secure Gateway (ASG) 和ProxySG web management consoles存在授权问题漏洞。未经身份验证的攻击者可利用该漏洞执行任意CLI命令，查看修改设备配置和策略，并关闭和重启设备。
solution:Upgrade broadcom symantec_proxysg to a higher version than 6.5.10.16,6.6.5.19,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.5,6.5.10.16),[6.6,6.6.5.19),[6.7,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_s200-30_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_s200-40_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_s400-20_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_s400-30_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_s400-40_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_500-10_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3); Upgrade broadcom symantec_advanced_secure_gateway_s500-20_firmware to a higher version than 6.7.4.17,6.7.5.12,7.2.7.2,7.3.3.3,and avoid the version [6.6,6.7.4.17),[6.7.5.0,6.7.5.12),[7.2,7.2.7.2),[7.3,7.3.3.3)