PT-2025-28075 · Broadcom · Broadcom Symantec It Management Suite

Eleftherios Panos · Publicado 2025-07-06 · Atualizado 2025-09-09 · CVE-2025-5333

Positive Technologies (AI Summary)

CVSS v4.0

9.5

Crítica

Vetor base

AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red

Name of the Vulnerable Software and Affected Versions Broadcom Symantec Endpoint Management Suite (Altiris) (affected versions not specified)

Description The software contains a critical vulnerability that allows remote attackers to execute arbitrary code in the context of the vulnerable service process. The vulnerability was discovered during a red team engagement involving a legacy .NET Remoting service. The issue involves an unauthenticated remote code execution (RCE) vulnerability within the Broadcom Symantec Altiris Inventory Rule Management.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Block port 4011. Update configurations.

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2025-5333

Produtos afetados

Broadcom Symantec It Management Suite

Referências · 21

• https://twitter.com/CveFindCom/status/1941862169898803301 · Publicação no Twitter
• https://twitter.com/LRQA_Cyber_Labs/status/1943349334117867745 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1941863270052229372 · Publicação no Twitter
• https://twitter.com/UndercodeNews/status/1945009826662170831 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-5333 · Nota de Segurança
• https://twitter.com/freedomhack101/status/1965425584697475339 · Publicação no Twitter
• https://twitter.com/secharvesterx/status/1944774050657485267 · Publicação no Twitter
• https://twitter.com/freedomhack101/status/1945111722395615602 · Publicação no Twitter
• https://t.me/cybersecuritytechnologies/12176 · Publicação no Telegram
• https://twitter.com/lefterispan/status/1942249381626810876 · Publicação no Twitter
• https://twitter.com/reverseame/status/1965109678309838943 · Publicação no Twitter
• https://twitter.com/_r_netsec/status/1944773403405357145 · Publicação no Twitter
• https://t.me/rnetsec/21773 · Publicação no Telegram
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35903 · Aviso do Fabricante
• https://twitter.com/CCBalert/status/1942207913314939056 · Publicação no Twitter