CVE-2015-8801

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection version 12.1 before RU6 MP5

Description A race condition in the client allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the device manager recognizes a new USB device.

Recommendations For Symantec Endpoint Protection version 12.1 before RU6 MP5, update to RU6 MP5 or later to resolve the issue. As a temporary workaround, consider restricting access to USB devices until the update is applied.