Boot-Time Compromise Vulnerability in Broadcom Appliances
CVE-2025-24507

8.9HIGH

Key Information:

Vendor
Broadcom
Status
Symantec Privileged Access Management
Vendor
CVE Published:
30 January 2025

Summary

A critical vulnerability exists that can lead to the compromise of Broadcom appliances during the boot process. Attackers could exploit this flaw to manipulate the appliance's boot sequence, potentially gaining unauthorized access and control over the device. This risk highlights the importance of implementing robust security measures at boot time to protect sensitive infrastructure.

Affected Version(s)

Symantec Privileged Access Management 3.4.6

Symantec Privileged Access Management 3.4.6

Symantec Privileged Access Management 4.1.0 <= 4.1.8

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Stefan Grönke ([email protected])
.