Boot-Time Compromise Vulnerability in Broadcom Appliances
CVE-2025-24507

8.9HIGH

Key Information:

Vendor

Broadcom
Status
Symantec Privileged Access Management
Vendor
CVE Published:
30 January 2025

What is CVE-2025-24507?

A critical vulnerability exists that can lead to the compromise of Broadcom appliances during the boot process. Attackers could exploit this flaw to manipulate the appliance's boot sequence, potentially gaining unauthorized access and control over the device. This risk highlights the importance of implementing robust security measures at boot time to protect sensitive infrastructure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Symantec Privileged Access Management 3.4.6

Symantec Privileged Access Management 3.4.6

Symantec Privileged Access Management 4.1.0 <= 4.1.8

References

https://support.broadcom.com/web/ecx/support-content-noti...

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Stefan Grönke (gronke@radicallyopensecurity.com)
JSON
.