PT-2025-28075 · Broadcom · Broadcom Symantec It Management Suite

Eleftherios Panos · Published 2025-07-06 · Updated 2025-09-09 · CVE-2025-5333

Positive Technologies (AI Summary)

CVSS v4.0

9.5

Critical

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red

Name of the Vulnerable Software and Affected Versions Broadcom Symantec Endpoint Management Suite (Altiris) (affected versions not specified)

Description The software contains a critical vulnerability that allows remote attackers to execute arbitrary code in the context of the vulnerable service process. The vulnerability was discovered during a red team engagement involving a legacy .NET Remoting service. The issue involves an unauthenticated remote code execution (RCE) vulnerability within the Broadcom Symantec Altiris Inventory Rule Management.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Block port 4011. Update configurations.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-5333

Affected Products

Broadcom Symantec It Management Suite

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2025-5333 · Security Note
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35903 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1941862169898803301 · Twitter Post
• https://twitter.com/LRQA_Cyber_Labs/status/1943349334117867745 · Twitter Post
• https://twitter.com/CVEnew/status/1941863270052229372 · Twitter Post
• https://twitter.com/UndercodeNews/status/1945009826662170831 · Twitter Post
• https://twitter.com/freedomhack101/status/1965425584697475339 · Twitter Post
• https://twitter.com/secharvesterx/status/1944774050657485267 · Twitter Post
• https://twitter.com/freedomhack101/status/1945111722395615602 · Twitter Post
• https://t.me/cybersecuritytechnologies/12176 · Telegram Post
• https://twitter.com/lefterispan/status/1942249381626810876 · Twitter Post
• https://twitter.com/reverseame/status/1965109678309838943 · Twitter Post
• https://twitter.com/_r_netsec/status/1944773403405357145 · Twitter Post
• https://t.me/rnetsec/21773 · Telegram Post
• https://twitter.com/CCBalert/status/1942207913314939056 · Twitter Post