by Kastro
Paper/Archive/CVE-2025-5333

CVE-2025-5333

Broadcom Symantec IT Management Suite — Unauthenticated Remote Code Execution in IT Management Suite

EPSS 0.7%CVSS 9.5
critical.is priorityof 100
39
CVSS 9.5 (CNA)9.5 / 10 × 3028.5Not in CISA KEV+300.0EPSS percentile 53.6.536 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Remote attackers can execute arbitrary code in the context of the vulnerable service process.

Affected

ProductAffectedFixed inSource
Symantec IT Management Suite8.6.x, 8.7.x 8.8–CNA

Scores by source

symantec (CNA)9.5CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorysupport.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35903