CVE-2025-5333

Remote attackers can execute arbitrary code in the context of the vulnerable service process...

CVE-2025-5333 Unauthenticated Remote Code Execution in IT Management Suite

Remote attackers can execute arbitrary code in the context of the vulnerable service process...

CVE-2025-5333

CVE-2025-5333 affects Broadcom Symantec Altiris IT/endpoint management (IRM) via the legacy .NET Remoting endpoint at tcp://:4011/IRM/HostedService. Unauthenticated RCE is possible because BinaryServerFormatterSinkProvider with TypeFilterLevel=Full deserializes input from the TCP channel. Affecte...

CVE-2025-5333 Unauthenticated Remote Code Execution in IT Management Suite

Remote attackers can execute arbitrary code in the context of the vulnerable service process...