CVE-2025-5333 CRITICAL

CVE-2025-5333: Unauthenticated Remote Code Execution in IT Management Suite

Vendor Broadcom
Product Symantec IT Management Suite
Published July 6, 2025
Last update July 7, 2025
View on NVD All CVEs

CVSS base score

9.5/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:I/V:C/RE:L/U:Red

What the vulnerability does

01Description

Remote attackers can execute arbitrary code in the context of the vulnerable service process.

Key dates

02Disclosure timeline

July 6, 2025 CVE published
July 7, 2025 Record updated