CVE-2012-0299

CVE-2012-0299 describes a critical vulnerability in Symantec Web Gateway 5.0.x versions prior to 5.0.3, where file-management scripts in the management GUI allow unauthenticated remote attackers to upload arbitrary code, potentially leading to remote code execution. This vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code, including a Metasploit module, is publicly available, though there is no evidence of active exploitation or significant community discussion.